00200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5800", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:41 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) madvise(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x40) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000280)={r2, 0x5, &(0x7f0000000180)=[0x7f, 0x5, 0xfcc, 0x2cc, 0x7], &(0x7f00000001c0)=[0x5, 0x100000001, 0x1], 0x4, 0x4, 0x5, &(0x7f0000000200)=[0xff6, 0x4, 0x6, 0x4], &(0x7f0000000240)=[0x100000001, 0x400, 0x9, 0x0]}) 05:57:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:41 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:41 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) r1 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xfc29, 0xfffffffffffffffd) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000200)={0x40000000000, 0x4f565559, 0x2000000000000, 0x800, 0x0, @stepwise={{0x7ff, 0x14}, {0x7ff}, {0x8}}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000100)=""/136) 05:57:42 executing program 3: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) connect$netlink(r0, &(0x7f0000000800)=@proc={0x10, 0x0, 0x9, 0x800}, 0xc) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x7, &(0x7f0000000000)=@raw=[@jmp={0x5, 0xfffffffffffffffd, 0xe, 0xb, 0x7, 0x2, 0xffffffffffffffff}, @exit, @call={0x85, 0x0, 0x0, 0xb}, @alu={0x4, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffff0, 0xffffffffffffffff}, @generic={0x489, 0xff, 0x0, 0xf97, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000280)='GPL\x00', 0x4, 0xca, &(0x7f0000000580)=""/202, 0x41f00, 0x1, [], r5, 0xc}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:42 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f581d", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:42 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:42 executing program 3: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:42 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x9, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getpeername(r2, &(0x7f0000000140)=@l2, &(0x7f0000000040)=0x80) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x3) write(r1, 0x0, 0xfffffffffffffedc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000001c0)) 05:57:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xfffffffffffffff9, 0x2000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) memfd_create(&(0x7f0000000080)='/dev/video#\x00', 0x6) set_tid_address(&(0x7f0000000000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) 05:57:42 executing program 3: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:42 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x5) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x3) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400800, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x2, 0x2, 0x8}}, 0x14) 05:57:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:42 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:43 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) fstatfs(r0, &(0x7f0000000040)=""/27) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$int_in(r5, 0x5473, &(0x7f0000000000)=0x800) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:43 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:43 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f580a", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) geteuid() ioctl$FICLONE(r0, 0x40049409, r0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x210400, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000200)=0x1) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000080)=0x1c, 0x80000) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000180)=0x1f) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x8, 0x4) 05:57:43 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:43 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x7, 0x6796d11, 0x80000000}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:43 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:43 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f580b", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x5e9900) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0x7, @capture={0x1000, 0x1, {0x5, 0x4}, 0x4, 0x1f}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:57:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000280)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:44 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:44 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000140)=""/68) 05:57:44 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5804", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:44 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:44 executing program 5: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:44 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:44 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x86, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:45 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:45 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5802", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:45 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x801, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7fff}, &(0x7f0000000100)=0x8) accept4$llc(r1, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x200, @local, 0x3d9b800000000}]}, &(0x7f00000001c0)=0x10) 05:57:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) personality(0x5900002) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:45 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0x5, 0x8, 0xcf5, 0x1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000580)={0x93, 0x7fff, 0x3, 'queue0\x00', 0x8}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = gettid() perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0x3, 0x10001, 0x2c50, 0x7, 0x0, 0x10000, 0x12000, 0x1, 0x7788, 0x9, 0x8000, 0x2, 0x3252, 0x5, 0x6, 0x5, 0x2, 0x2, 0x4, 0xfffffffffffffffe, 0xffffffff00000000, 0x7ff, 0x4, 0x7d, 0x5, 0x100, 0x7fffffff, 0x7ff, 0x200, 0x3, 0xca3a, 0x6, 0xffffffffffffffff, 0xf6, 0x30, 0x3, 0x0, 0xb26, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x201, 0x40, 0x5, 0x2, 0x4, 0x5, 0x2}, r6, 0x8, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000006c0)={0x3, 0x70, 0x7, 0x0, 0x8, 0x1, 0x0, 0x1000, 0x40422, 0x0, 0x4, 0x0, 0x8, 0x9, 0x6, 0xffff, 0xffffffff, 0x0, 0x29c5, 0x2, 0x20, 0x1, 0x7, 0x7, 0xc6, 0x9, 0x7, 0x10001, 0x8, 0x100, 0x7f71, 0x9, 0x4, 0x7ff, 0x7, 0x20, 0x8, 0x5, 0x0, 0xffff, 0x6, @perf_bp={&(0x7f0000000380)}, 0x4, 0x400, 0x9, 0x1, 0x9, 0x5d0, 0x7}, r6, 0x9, r1, 0x8) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 05:57:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:45 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 05:57:45 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x4, 0x80) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000240)={0xe, &(0x7f00000001c0)=""/14}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000140)) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6289, 0xfffffffffffffffc) unshare(0x20400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'bpq0\x00', 0x600}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)=0x4000) 05:57:45 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5800", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 2324.491748] QAT: Invalid ioctl 05:57:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) [ 2324.517825] QAT: Invalid ioctl [ 2324.597151] QAT: Invalid ioctl 05:57:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x800, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:46 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x7f) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x8000, 0x80000) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000140)={0x5, 0x4, [{0x6, 0x0, 0x6}, {0x7, 0x0, 0x312}, {0x1b}, {0x8, 0x0, 0x3}, {0x0, 0x0, 0x80000000}]}) 05:57:46 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x1, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:46 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x5, 0x5, 0x6, 0x9, 'syz1\x00', 0x80}) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) open(&(0x7f0000000200)='./file1\x00', 0x400000, 0x20) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x30, r4, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(r5, &(0x7f0000001380)=[{&(0x7f0000000700)=""/148, 0x94}], 0x100000000000003d, 0x0) 05:57:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x2, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x80000007, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:46 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000100)={[0xf000, 0x10000, 0x1, 0x15000], 0x8, 0x23, 0x8001}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x0, 0xdcef, 0x100000001, 0xd95}, 'syz0\x00', 0x2c}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) socket$unix(0x1, 0x7, 0x0) 05:57:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:46 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000240)={0x74e4db0c, 0x7, 0x3f}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = socket$rds(0x15, 0x5, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@xdp={0x2c, 0x1, r2, 0x6}, {&(0x7f0000000100)=""/39, 0x27}, &(0x7f0000000140), 0x20}, 0xa0) 05:57:46 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x800, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x20, "ff702a12b6c478c717c37f55aa2cb98a59de6d12d5f4cc1acd26d9e7022ff281", 0x1, 0x1}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:46 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x4f565559, 0x0, 0x10000000000, 0x4000000001, @stepwise}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 05:57:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:47 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x7, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:47 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x40042, 0x120) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:47 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000593000/0x2000)=nil, 0x2000, 0x0, 0x102012, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x100000000, 0x6}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x4}}}, 0x84) 05:57:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:47 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4ca, 0x208000) connect$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x4, 0x7, 0x40, "2395a37f8123cd297be747cbf149ac6e2139df6c2d6efb8faf3c808ee495a9f7641b8f408104ce3da1b7b9000f137e2698c4541c7c3f2355113fc38af6fc3c", 0x1}, 0x60) 05:57:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x3000000000, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:47 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x1, @stepwise}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x80000000) 05:57:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x982f, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303006ffffffe50000004b455845435f494e495452454d46535f434845434b2c762f64737023002c6f626a5f757365723d26a42c6fab14fdd0626a5f747970653d2f6065762f6b766d002c728f1b6c046f6e746578743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:48 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x80000019, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:48 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3032c89a, 0x40080) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0xf, @raw_data="3d757d64e1d0ec640b2743e0fe77f52af8de55d4c09b4ea568fdd682cad068f1fbba4c654e3252a6d62d6f91fe161e22596c51ddc4c18ef55684de3b4e28b765dff93890202b3bc191feb0f7137103aa7b86143d09ff1e5196b211dec809cc19e84ed0bc5251b530d53d7c5af845939837a9278252dfe9d6ef4b51ab43e6e763e72b34d59b4b33b5ef22e45a7423b00f0d67156d96af7e2123035578c9c37bf1f46e7e4d2377f1a3613ed942dce114e52b3219869e1b32abeddecf59642445a4fa742fa2b6f2c224"}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:48 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6287, 0x800) sysfs$2(0x2, 0x20, &(0x7f0000000100)=""/90) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="9929a115c047b2dbb8cb7fe42cf8d6e503552ecd58b288c9577093512dbd329c759c2f81cd3da90be605a69aa4ccdba0fd20aa7d5ccc92af2975b96fc8bce3aaa629b9fe5d249519a439e3ff1ae1f80320", 0x51, 0xfffffffffffffffd) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000003c0)={{0xffffffffffffffff, 0x2, 0x0, 0x3, 0x80000001}, 0x0, 0x3e88afaa}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x610881, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000340)={0x100, 0x5, 0x7}) keyctl$update(0x2, r1, &(0x7f0000000280)="97a8806b5ce4cb423719950399f2391d382f8ec54b9641a6127f3932ffbd9503a98e7ed80d133b612b130de573ae4d2fb6755da48683a45bd679af5ce93761e2171b0a7583d3710b89", 0x49) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x80000) mkdir(&(0x7f0000000440)='./file0\x00', 0x3c) 05:57:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4000, &(0x7f00000000c0)=0x1, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) fremovexattr(r0, &(0x7f0000000140)=@known='trusted.overlay.nlink\x00') perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x7, 0xe63, 0x3, 0x1f, 0x0, 0xed20, 0x200, 0x2, 0x4, 0x7, 0x748, 0xbc4, 0x7fff, 0x1, 0x80000000, 0x200, 0x8, 0x2, 0x3, 0x80, 0x2, 0x2aa, 0x3, 0x5, 0x2, 0xffffffff, 0x100, 0x9, 0x1, 0x3, 0x8, 0x0, 0x1, 0x1000000000000000, 0x8, 0x7, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x1000, 0x9, 0x7, 0x0, 0x200, 0x5}, 0x0, 0x10, r0, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0xfffffffffffffffd) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x234000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "abd173e292fc7d23de68ff9dc4386ad4fcf616f6"}, 0x15, 0x1) write(r6, 0x0, 0x0) write$P9_RSYMLINK(r6, &(0x7f0000000380)={0x14, 0x11, 0x1, {0x0, 0x1}}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x5, 0x8, 0x4, 0xe}}) 05:57:49 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x95, "2ae4e23419569071cf6293fb9eb926a72ec14fdae27c78c257bec65719840cc96911fb4e542028e7d0a30011aad94d51c231b040cb3efd6be8b0a1665a3015f88481a06b60a285ccd196013bba718d3970290fb6dc4a2a7461d7e2608a12096b182e6bbacf87ce4ad2de682f72a19b4d15ebaa3310e4da2582f00fedaa017600a7017bbda96f22b82056c9f4d63c55fe59575a6ff8"}, &(0x7f0000000040)=0xb9) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x6, 0x4) r1 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xb6, 0x101000) syncfs(r1) 05:57:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:49 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0xc0000000, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000580)=""/145) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 05:57:49 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0xffff, {0x200, 0x40, 0x6, 0x2}}) 05:57:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x4, 0xe}}) 05:57:49 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:49 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e21, 0x3f, @remote, 0x9}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x9}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e21}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0xc7, @mcast2, 0x6}], 0xc4) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x1, 0x4, 0x0, @stepwise}) 05:57:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xe}}) 05:57:49 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x600, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)=0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 05:57:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe}}) 05:57:49 executing program 5: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x100) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe}}) 05:57:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:50 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8c0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x8, 0x3, 0x10001, 0x8001, 'syz0\x00', 0x400}, 0x4, 0x3, 0x8, r1, 0x5, 0xb, 'syz0\x00', &(0x7f0000000180)=['.eth0\'{self8systemeth1\x00', '\x00', '$self\x00', '\x00', '@mime_type\x00'], 0x2a, [], [0xff, 0x7, 0x9, 0x9]}) write$P9_RLOPEN(r0, &(0x7f0000000100)={0x18, 0xd, 0x1, {{0xf5, 0x2, 0x6}, 0x80}}, 0x18) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000440)=r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000000)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000480)=0x5, 0x4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x0, 0x10000007c77775f, 0x0, 0xffffffffffff8001, 0x0, @discrete={0x9, 0x5}}) 05:57:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}) 05:57:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:50 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x19}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) sched_getparam(r7, &(0x7f0000000140)) 05:57:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030323030303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a4406f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578742c0000000000000000"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:50 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0xb, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:50 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0xfffffffffffffffe) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000240)={0x40, 0xc, &(0x7f00000001c0)="364f935c2b9c6cb835b20fbac9ee61508bbe10e1e653577b1d87beabe7c4e72bc235d4b82833c3b1ca77e9fdb32c0111106b8235f41360f93fc2cffb226020f01d967635b345fc2e3207b33356d699f529b24ccc2f7990a7448421d752d36cf0981311e32ccad868af35d74390a0f19efd8610bafb594aec6548fa9f3955236f", {0x6, 0x0, 0x50313459, 0x8, 0x2c4, 0x0, 0x1}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xff, @mcast1, 0x8000}, @in6={0xa, 0x4e22, 0xea4, @mcast2, 0x8}], 0x38) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000000)="db0bea80c75d1eef21c6815d7fe8ac108674d432b533bc3b8f1fe5246228ab5f1424bf96ad4cc59bd4e39e868a573df30596", {0x6, 0x3, 0x36775f5f, 0x7, 0x6, 0x7, 0x0, 0x4}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000480)={{0x9, 0x1000}, 'port1\x00', 0x4, 0x10008, 0x7, 0x2, 0x1, 0xfffffffffffffff7, 0x4d9, 0x0, 0x7, 0x6}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000100)={0x100000000, 0xe, 0x2a, "17e22366facc73a216c461bfdd6739d0f4595080cbf4f076b436e5ce39be98d66e880aefc9140819b6d4318e5142714b317c58e49ff176227319fc2b", 0x32, "c9a382c548052964d15f292ea7b47a50ea03fa76fe2df7d3159d5b67fda2ace38380b4ae65bdbbd50ffeb026c51a070ff3f83bf920e3f09f09134fd1", 0x20}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e22, 0x9, @mcast1, 0x100000001}}, 0x7ff, 0x7fff, 0xa9, "fb8516ca443845bf6a9cb39eb32b77223a0e9bb1f1907a9128e5d061e441b57549e833dba0098c59f44dadf6e6221a97e0dd4a38f9fff0f526efe3f3da4f85abbdf1cbab23edbc8d04879762afa6a16d"}, 0xd8) 05:57:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:57:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:50 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x638}, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ptrace$getregset(0x4204, r6, 0x6, &(0x7f0000000200)={&(0x7f0000000180)=""/108, 0x6c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:50 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10202, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) 05:57:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 05:57:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:51 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x4, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:51 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000012c0)="288738fce21783209d160bb964ad3b6c1a54d1779ea985ca5b24cf0e7b004a7982dd727cd7bb02e50ef2d6e45b090e2f63c4ec49f40ff2844a4e539658981ef58d387c6fe472c857ab5e840f3982b0d6f9dec37d3f53e3d0b627219665141e2755740c7af76b251f6b500fa82497abe18ba67a34b980015e7e67302c39ff29db622a38f72772699f01fff51891322507f0c053ecd4a8257116ccc3d5ee6fc21cf03ebbc6c98f8a2b4218aa41263f91b3c3118ed7ef855b7a399a7110890969183e56f06c6ffe8fccd5ca451364f914e6415dc3aa8a919a7e71fca02c0986ea9d1047a6f0dad4d907283d95719efeb86778fc0e737606a6ed05fa63338593c9b1169f", 0x102) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x101, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 05:57:51 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c830, 0xffffffffffffffff, 0xfffffffffffffffc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = memfd_create(&(0x7f0000000040)='[bdev)/selfnodevem0nodev\x00', 0x6) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000140)="c4ed28ae0ca2fe3237f5790b63") r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x5ab) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xcf6d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe), 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x7a7f7f7f, 0x3, 0x0, 0x0, @stepwise}) 05:57:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000084000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 05:57:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe), 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) lseek(r0, 0x0, 0x7) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe), 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:51 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) close(r0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000000, 0x1d, r0, 0x17) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:51 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) memfd_create(0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x8, 0x0, 0x47}) open(0x0, 0x0, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0xc) socketpair(0xd, 0x1, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000680)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) 05:57:51 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x40000000, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000005c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x1, 0x9, 0x5, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x109900, 0x83) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/81) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="85be00d70c433b6ff7d64356a4b5b3d7e52290452cba5b147a1e8b6a81d9b22abb4cea48833dd1c9ca9c0da3dca6f2a6cb9e8547fc5be56fffd64d303419362227d971786eaa27aa3516ef5f9ef20c45cda3d4f111fa67a1d2c582eafac5e3fcb765793ccb2bbae435ca73739fd836481d387d5b09e1bbadce3ab539a854b7b21737825caa51bff8f7", 0x89, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) keyctl$link(0x8, r2, r3) 05:57:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:52 executing program 3: socketpair$inet(0x2, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="15") bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x2000800e, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='vegas\x00', 0x6) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x389756b1353686c0, 0x120, 0x0, 0xffffffffffffffeb) sendto$inet(r0, &(0x7f0000000080)="89", 0x1, 0x41, 0x0, 0x0) 05:57:52 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) signalfd(r0, &(0x7f00000001c0)={0x4}, 0x8) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x8, 0xa, 0x4, 0x11000, {r2, r3/1000+10000}, {0x5, 0x1, 0x3, 0xfff, 0x100000000, 0xb7b, "00ef3a6d"}, 0xf984, 0x3, @planes=&(0x7f0000000080)={0x9, 0x8, @mem_offset=0x5, 0x20}, 0x4}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:52 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000010002200ac1bfba1623ab1c03d1a7b812800120008000100736974001c000200080008004e2200b90800110800090029000000080013003e05aa7cad453ef0fe7cac09c1cafef6162afb71bc5be04b9cb5c7bd043d22b3bd50371e6a51bb2dac6348ad1080757bc4db20b9317f8c011643f7dfca676a7ded3333319ea3df3d0dfd3903d772512a0f99df2175a7e1d74ac391bc8e12d330019a3064222bd3c6a73340f39ad53bc793c7d776d2193c19623b1c3a5ea26b64ce77b10303d9c7beb7cc5808467f0260e8f89f7f90685d", @ANYRES32=0x0], 0x2}}, 0x4) getpid() 05:57:52 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0xffffff1f, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:52 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x4f565559, 0x0, 0x400, 0x0, @stepwise}) 05:57:52 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = dup(r0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x3ff, 0x1, 0x0, 0x1, 0xfb01, 0x307f, 0x6, 0x40, 0x5, 0xffffffffffffffff, 0x28d}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:52 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d786500086d736907653d3078306f00301e3030303030302c66756e633d4b455845435f524e490600414d46535f434845434b65762f6406000000000000005f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0xfffffffffffffffd, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:52 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100, 0x10001) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x2, 0x6, "6af243d3611923e2c09a51b88cc393a3d3ffe837d9d45f10561e320639d9b42c", 0x6b37c463, 0x100000000, 0xfff, 0x8, 0x40}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0x80) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565557, 0x0, 0x0, 0x1, @stepwise}) 05:57:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:52 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) write$smack_current(r0, &(0x7f0000000140)='\x00', 0x1) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:53 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x3, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:53 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x7fff, 0x0, 0x5}, 0x8001, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x80, 0x3ff, 0x4, 0xffffffffffff8000}) 05:57:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:53 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0x10000, {{0xa, 0x4e20, 0x8, @ipv4={[], [], @local}, 0x4}}, {{0xa, 0x4e23, 0x100000001, @mcast2, 0x2}}}, 0x108) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:53 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @empty, 0x1}, {0xa, 0x4e23, 0x0, @local, 0x2}, r1, 0x7}}, 0x48) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f6d7365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c00dcd0d29b7f7df86cb4e306958121ca2bfe54f86a1cf037d4060150a39ab39604e175419b186ea26db3e2b60b74cb7685d1e17509c7c1c2bc679974b0e9542c263a4420e46b22e32cfd1b91eeec8a2018054557be9e96df5a0a7c6d33fe7c194a43077edc62fa60b4c73658198a69ab99ea741dacb2d3a96f18"]) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x320) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000007c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000780), r1}}, 0x18) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={@loopback, @mcast1, @ipv4, 0x100, 0x9, 0xfffffffffffffc01, 0x500, 0x1000, 0x100000, r4}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000800)=""/226) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:53 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x1000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x87, 0x1) tee(r1, r0, 0x7, 0xf) pread64(r1, &(0x7f0000000180)=""/207, 0xcf, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x9, 0x10001, 0x2, 0x4, 0x7, [{0xc81, 0x4, 0x8, 0x0, 0x0, 0x6}, {0x1, 0x80000000, 0x2, 0x0, 0x0, 0x480}, {0x92ebbfb, 0x100000000, 0x4, 0x0, 0x0, 0x2081}, {0x1000, 0x1, 0x1}, {0xe71, 0x6, 0xc, 0x0, 0x0, 0x2004}, {0x1, 0x1, 0x0, 0x0, 0x0, 0x8}, {0x8, 0x4, 0x5, 0x0, 0x0, 0x2}]}) connect$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x7, 0x1f, 0x7f, "45dd28803ebc46726c9028074ca89375bcfddfa88c0c3babbd9f0fb9d40e013678c29b52c823f01e471b986931e7295c940b88d2256a9eef8cf4c6351ee0dc", 0x29}, 0x60) write$binfmt_aout(r1, &(0x7f0000000440)={{0xcc, 0x99, 0x6c, 0x1d0, 0x79, 0x80000000, 0x31, 0x7ff}, "0bb01193ffe83da0c0f575cfeb4a9f70ec068bbecf09b786d51dd2f5c9029daa0b4d84148cf0bba5ef6a7c54ef2f76f63e339c44c62fc2cf95c6b0f961b1e475f33c8e206b9d9eb1ffddcca5bf44c7eeaf405233a384f8f7f8554477e55cb650d8e8dd2b", [[], [], [], [], []]}, 0x584) 05:57:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:53 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x40000001, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:53 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0xa20000, 0x7, 0x8001, [], &(0x7f0000000140)={0x9a0907, 0x0, [], @p_u16=&(0x7f0000000100)=0xae}}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) 05:57:53 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) 05:57:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:53 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:54 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x210000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x9e, 0x1}, @timestamp], 0x2) 05:57:54 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000380)={0x5, &(0x7f0000000280)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000580)={r5, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:54 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:54 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x101000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @local}, &(0x7f0000000140)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) fcntl$lock(r1, 0x25, &(0x7f0000000280)={0x1, 0x0, 0x2, 0x7fff, r3}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8450820}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x102, 0x70bd25, 0x25dfdbfb, {0x0, r2, {0xb, 0x7}, {0x2, 0xb}, {0xffff, 0xffe0}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x90) 05:57:54 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x100, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x4}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:54 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:54 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0xc0000001, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:54 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:54 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x8, 0x4260, 0x3ff, 0xffff, 0xff, 0x1000, 0x80, 0x1ff, 0x8000, 0x9, 0x1539, 0x8}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0xfffffffffffffff7) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f644a762f6b766d002c726f6f74636f6e746578743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) fsetxattr$security_evm(r5, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="2294fd62fb83a9e80b780f91"], 0xc, 0x2) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:54 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:54 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x5cff05, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000140)={0xc, @raw_data="90164cf6d66df502908b23bb71254389b3c22498d226236c222de3e5127ca01198fd85ce4da8f374c8c02d4c65a0ef0c0c0186dc766b3a0d0f7fe0c5dcc204a519e269eb4a6944a265927c3f03da94a58fd950e190ead384b188c22c81cf9f9c940e4c1b097a21548ac5611f030da7ad429d71876b640caaf6d7adf0ca1e5f4872997f974ef658f4491f6bf9ff883e1bd9a68540792ac6faf304855be7e778e93e748afe10cf9ec262bb0eaf1215c911c906567c3a9a8fbd9716fb670d379ca485d0b1ce9e83df48"}) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x8000001a, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:55 executing program 4: r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:55 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x2, 0x8000005f565559, 0x81, 0x0, 0x2, @discrete={0x9}}) 05:57:55 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="7472677d060e9db4fcbde950c0dea36e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66754d666d11455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f74ee1070425b02f81f2f6b766d002c726f6f74636f6e746578743d757365725f752c008cc365b96e4035bcc2b67a4cc8bc81430711c8acaef58f6c34ec3e733a5473cc7a433d89a26a412beb6080b3e0dca766a35d5434ab2fd23e18c74341894a7335fa7e6004f6814b09b900040155238aedf3a8ab9359fca8f5461b9fb35f6a05721e829235aeeab29ad676eff59f209cdbb679b3c65c279e89dc7c059e0ebe3877cc6fa166320b142fb9010c5405acb345b94f3f5528fe9531bc02c2a8c7879b6eba1b97850b8f7c943e254658249d83bda1cd0f877276076e04b514cc3c2c563d581b11e724411799fabb2fed2a40b7d67612a2ba91b27f61f501990f79ffdd6168a5194166a40cf8d362660e4facac5245afc0ee0b23cbd8987650419f801c940bd1c3fe3f445ce8e1d28cf35028b11ffcac5d3246349972d1f8b6b0e1c17de7231392444f3a31d5"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:55 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x8, 0xffffffffffffffff, 0x8000, 0x6, 0x3, 0x7, 0x5, 0x8000, 0x0, 0x3, 0x6, 0x1f}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3, {0x4, 0x8, 0x40, 0x9}}) fcntl$addseals(r0, 0x409, 0x5) 05:57:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x9, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:55 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)={'syz0', "63c8d76d50ac00ce296fe1814c7bc54c7d7d61ced0b0fbc620d3b0acb1fec3bbcfc018368b88e78d4b5570bafeeb604dd846c832dd179d510b372ee7347c4d748aefd4c37001d853e8a3dd2d9f9912ec553c24"}, 0x57) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x3f7d, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) write$eventfd(r3, &(0x7f0000000040)=0x101, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:56 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_getaffinity(r1, 0x8, &(0x7f00000001c0)) socket(0xd, 0xa, 0x20) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000100)=""/124, 0x7c) 05:57:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:56 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) write$selinux_attr(r0, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x6, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:56 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x428a, 0xfffffffffffffffd) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:56 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0xffffffffffffffff) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:56 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x7, 0x7, 0x1, 0x1, 0x5, 0x8001, 0xe85e, 0x400, 0x3, 0x80000001, 0x0, 0xfffffffffffff800, 0x1, 0x6, 0x10, 0x28}}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:56 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000380)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:56 executing program 5: r0 = gettid() setpriority(0x2, r0, 0x9) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x2) 05:57:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x50, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:57 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x4f56555a, 0xfffffffffffffffa, 0x0, 0x4, @discrete={0x6}}) 05:57:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:57 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000180)={0x3, 0x1ff, 0x80, 0x104}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) mq_timedsend(r0, &(0x7f0000000280)="f50d1b02f11cb13abf9b7aad7498f588218809a22aa9ccbf607495a90f687c00beb088246a9fff37", 0x28, 0x1, &(0x7f0000000340)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x2) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1000000000000359, 0x3) 05:57:57 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x4) 05:57:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:57 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d30783030303030303030303030303030300600000000000000455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c00f9fc8f23ba42ae252c9ce7f44d1a73ae3d4186b7cc492a56f0"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000000)={0x0, 0xfd, 0x0, 0x2, {0x2, 0x69, 0x7, 0x6}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x302) 05:57:57 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x80, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r1, 0x0, 0x22, &(0x7f0000000100)={@rand_addr, @multicast1, @multicast2}, &(0x7f0000000140)=0xc) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000000)) 05:57:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0xd, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:57 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:58 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x9, 0x0) 05:57:58 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303430303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e7465787494d63b3c16f1dab96b8718418f81da3d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000640)=""/250, &(0x7f0000000380)=0xfa) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000780)={0x4, &(0x7f0000000740)=[{0x0, 0x1000, 0x1, 0x9}, {0x100000000, 0x1000, 0xd1, 0x3}, {0x7, 0x3, 0x9f}, {0x9, 0x8, 0x1, 0x6b7}]}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x78e, 0x400, 0x4, 0x1ff, 0x0, 0x80, 0x5b, 0x669a, 0x0}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r5, @in6={{0xa, 0x4e21, 0xd531, @local}}, 0x7, 0x7, 0x2e6, 0x9}, 0x98) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:58 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20001, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000080)=""/36, &(0x7f0000000100)=""/52, &(0x7f0000000140)=""/11, 0xf000}) poll(&(0x7f00000001c0)=[{r0, 0x108}, {r1, 0x8e6370e051a55213}, {r0, 0x441c}, {r0}, {r1, 0x20}, {r1, 0x10}, {r0, 0xc040}], 0x7, 0x18) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:57:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x80000000000) write(r3, 0x0, 0xffffffffffffffb6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 05:57:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 05:57:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x80000008, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:58 executing program 5: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fbc00c7ff26d30754a73b2641395568c9912e1703466703d39211588feedefcc635b1cbafe8f767e4b3f005445aa72a4cab2b81b543cd03116f1a2e81a2491a21cd50fbbc8bd831dcfe4bd1e7b69c72b499aff748031f767c2d50e8e78f055908e220dc3e4a98bd0424ad313d1eac736765d361b6af585e8d9ebbd894895bf91a498856a7c21d408f1474a43c6f33cf231b5a983972dda9026ebc74f4639ab068e79565ee126219661346f559f3e8b0bfb95b6e2a8d20842c6d0e0002dc1b0"], 0xc0, 0x1) 05:57:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 05:57:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:59 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x7e, 0x0, 0x2, @discrete={0x716730b1, 0x8001}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x0) 05:57:59 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x5e16c736) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:57:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000280)={0x4, &(0x7f0000000540)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f752f6465762f6473702c6f626a82757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x4, 0x10000}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x8000001d, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:59 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = memfd_create(&(0x7f0000000000)="2b4073656c696e757829e700", 0x3) ioctl$NBD_DO_IT(r1, 0xab03) 05:57:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:57:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x0, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:57:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socket(0x9, 0x80007, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:57:59 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0xfffffffffffffffc, @stepwise}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x2, 0x3}) 05:58:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x0, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:58:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000380)={0x0, 0xffffffffffffff40, {0x89, 0xff, 0x80000001, 0x401}}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x0, {0x1000, 0x400, 0x400, 0xfce}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000340)={0xb1, &(0x7f0000000200)="d7cda7d9221137971c45374e212e33abe71a3d84cc73504504c4d5a4a81c712c8b3521886ef36b2d73dee726b54003cbadd9696280e595a068080d449e22a5ba813815fe0a24029796b9157033c163680b21e52da649222fdbb5c1ba3a0a834faa1f7179a6107c913be5a421b0939c52c4c084943621a2a5b216ef22681982b305959607490309e50584c6094d8d145efeffe362c91946141dce9d4f7673509445638e50fcb6aa6b089b418d4dea3dfaac"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000180)=0xfffffffffffffdcb) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r5, 0x10000}, 0xc) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000400)=0x1000000000) write(r4, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000600)=r6) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x0, 0xecaf, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:58:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:00 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x2, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise={{0x6, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:58:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000140)="8f52fc6c8b02143dab421712fcb4e9bd022ce2b7bbb23de37c8c9fb5690a51b764955a4b6f69e3fb73334f1fd395a01b90a0a8af17f4b291887ace73a10542efe04cea8e12ed868b3062a30416b43fcdde35b30bb73ee67e487f730b8ce5021b0b36ac48929c7a290514ecbf4e68d7"}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030302e30303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000006c0)={0x959d, 0x2, 0x9, 0x9, 0x72, 0x80, 0x1, 0x6, 0x5, 0x4}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000700)}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f0000000840)=""/27, 0x1b}, {&(0x7f0000000880)=""/92, 0x5c}, {&(0x7f0000000900)=""/14, 0xe}, {&(0x7f0000000940)=""/69, 0x45}], 0x6) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000280)='rootcontext', &(0x7f0000000380)='obj_user', &(0x7f0000000580)='ppp1\x00'], &(0x7f0000000680)=[&(0x7f0000000600)='eth0self\x00', &(0x7f0000000640)='user_u']) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:00 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x0, 0xae, 0x40, 0x2, 0x3, 0x4157}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise={{0x0, 0x6}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:58:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0xa, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:00 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f56555c, 0x0, 0x0, 0x0, @stepwise={{0xa3c, 0x800}, {0x9f, 0x9}, {0x4, 0xfff}}}) 05:58:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise={{}, {0x100000000, 0x7}, {0x665d, 0x101}}}) 05:58:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:01 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:01 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise={{}, {0x0, 0x7}, {0x665d, 0x101}}}) 05:58:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:01 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x100, 0x7}) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:01 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x10001, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@remote}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x80000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:01 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise={{}, {}, {0x665d, 0x101}}}) 05:58:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c65762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746178743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x5, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:01 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x6287, 0x28080) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x7) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x518cd71) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x5, {0x10000000, 0x5}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x9, 0x4, 0x1b57, [], &(0x7f0000000040)=0x2}) fcntl$getflags(r0, 0xb) 05:58:01 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise={{}, {}, {0x0, 0x101}}}) 05:58:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:01 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:01 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x10b000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:02 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0xffffffffffffffff) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023fe2c6f626a4f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x18c455, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:02 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x628a, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x200000, 0x0) write$P9_RMKDIR(r1, &(0x7f00000003c0)={0x14, 0x49, 0x2, {0x4, 0x3, 0x2}}, 0x14) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'keyring-{{'}, {0x20, '/dev/video#\x00'}, {0x20, '/dev/video#\x00'}, {0x20, '/dev/video#\x00'}, {0x20, '/dev/video#\x00'}], 0xa, "24e8d533fd5e2874a2458d1a6eb102e7a80e66b6e7e57d7e86882121afcd496442fd169df0e896ffc2d0971287ce3db57f6d7a2659ceb86d403e1f215caa5865098eccc9fe4151621d5b72fa25257dd402b302ceefa9e61969bf1b87711e35efa93792c0aafd6e601b53d2335e497c7b24efce0bc772473407d9d6bf7603003f04d79c0e3a8334fca3bebb31843bd6247417455413c7353ab3535e0a6b9327f85e0a6a495b8d75a22706fed3e0e999b506c98c8c32d775127f229155a0bd5001612a4adee32ac31327db89e9b9a6b4ba1aefdca823130cf8e7fad8acb01133ebd3db3d089f9f905ba89fd949f56f"}, 0x138) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x1, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x412000, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={r2, r3, 0xf, 0x2}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200801, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000240)={0x0, 0x3, 0x1000, 0x8001}) creat(&(0x7f0000000040)='./file0\x00', 0x38) write$selinux_attr(r4, &(0x7f0000000080)='system_u:object_r:semanage_read_lock_t:s0\x00', 0x2a) 05:58:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0x7, @capture={0x1000, 0x1, {0x5, 0x4}, 0x4, 0x1f}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0x7, @capture={0x1000, 0x1, {0x5, 0x4}, 0x4, 0x1f}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:02 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000200)={0x8, "5397f7bf7deabce5ee209afeaab9c071d9f96d1523643389325944d52c37d5a6", 0x3, 0x2, 0xffffffff, 0x401, 0x2, 0x4, 0x1abb61f, 0x1f}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/66, 0x42}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x1, 0xbb85}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:02 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x10000200003) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f000087dffe)="80", 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x21, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0x7, @capture={0x1000, 0x1, {0x5, 0x4}, 0x4, 0x1f}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:03 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:03 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:03 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:03 executing program 3: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) finit_module(r0, &(0x7f0000000040)='\x00', 0x1) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:03 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x4020940d, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:03 executing program 3: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x3f00, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:03 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x100, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) setsockopt(r5, 0x7, 0x1f, &(0x7f0000000200)="07e7123424619cd39f62bb0924a225f9297618bb5fb84e5e5ad14f6da2e6d6e25dc02f64cebd7fddb7d80c2429a523235f825c06139c1aa6db6e4634373547750af99370ef404a66a2", 0x49) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000140)) 05:58:03 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5452, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x10001}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) mmap$perf(&(0x7f0000b48000/0x3000)=nil, 0x3000, 0x0, 0x2810, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:04 executing program 3: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca", 0x24}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:04 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0285628, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca", 0x24}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0585611, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000140)=0x40) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:04 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x5000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5421, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca", 0x24}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:04 executing program 3: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5451, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400680, 0x0) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x40000001, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:05 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:05 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0585609, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:05 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:05 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:05 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:05 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc058565d, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b4558495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c000000000000"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x2, 0x2000, 0x1000, &(0x7f00004b1000/0x1000)=nil}) 05:58:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:05 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:05 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0205647, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:05 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xc0000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:06 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5460, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:06 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:06 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x3c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030301130303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f74797065766d002c726f6f74636f6e746578743d757365725f752c0000000000000000"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x3, 0x1, 0x40) semctl$SEM_INFO(r2, 0x4, 0x13, &(0x7f0000000640)=""/71) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000580)="078602aa8caf33e0dd30a3afa6644276e1733439b2d4735172a261f68ec242bab1643b30141d5330584824b5117725c8379c26e1b2b8807067092ce9cdaf32cbcccfa01ebc37f7e6fda0ea8b2aaafafb311336a49b2ef380336a2f70c39758b7dff77b91e1585eab818ce976c5b9c845d150009c3eaa38e459dceb7fd4bc5db2d6c7d3941ffd78a8e7b795435ad0822ace6ea3d075361ff59ef7e8e12af564838e45255500fe7ee2", 0xa8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:06 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x2, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() write$cgroup_pid(r0, &(0x7f0000000140)=r2, 0x12) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x500000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:06 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @stepwise}) 05:58:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:06 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc020660b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:06 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 05:58:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:06 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc058560f, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:06 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 05:58:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 05:58:07 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0345667, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000280)=0x0) ptrace$peek(0x1, r6, &(0x7f0000000400)) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xa4, &(0x7f0000000140)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, [], 0x17}}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e22, 0x9, @local, 0x8}, @in6={0xa, 0x4e21, 0x9, @local, 0x5}]}, &(0x7f0000000200)=0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x9f, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @rand_addr=0xe92d}, {0x2, 0x4e20, @loopback}, 0x21, 0x3, 0xffff, 0xfffffffffffffffd, 0x401, &(0x7f0000000440)='bridge_slave_0\x00', 0x8, 0x0, 0x40}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r7, 0x6, 0x8001, 0xfffffffeffffffff, 0x1, 0xda04, 0x7, 0x7, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x3f}}, &(0x7f0000000240)=0xb0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x7, 0x400100) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x1000080, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b4558454345434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c0000000000000000000000000000"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmget$private(0x0, 0x2000, 0x1041, &(0x7f000010b000/0x2000)=nil) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x0, 0x69, 0x0, 0x3, @stepwise}) 05:58:07 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x40049409, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:07 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0205649, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x0, 0x69, 0x0, 0x3, @stepwise}) 05:58:07 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0285629, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b455845431cab38133ad9f68c648047045f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c006722c0f00daebed24fc111fa67bdefbc7e038e6dbb17adf49cc3da5bad211713"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xa2040, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:08 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x0, 0x69, 0x0, 0x3, @stepwise}) 05:58:08 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5450, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) fchdir(r2) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x4b, 0x8, 0x1, 0x0, 0xcc, 0xff, 0x5, 0x237, 0x101, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x200, 0x0, 0x108}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f00000013c0)=""/4096, 0x5}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000780)={@mcast2, 0x0}, &(0x7f00000007c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000900)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000940)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000a40)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'veth0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001000)=0x14) getsockname$packet(r0, &(0x7f00000033c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003400)=0x14) getsockname$packet(r0, &(0x7f0000003440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003480)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000003800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800006}, 0xc, &(0x7f00000037c0)={&(0x7f00000023c0)=ANY=[@ANYBLOB="f8eeff00", @ANYRES16=r6, @ANYBLOB="000326bd7000fbdbdf250100000008070000", @ANYRES32=r7, @ANYBLOB="f000020b3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000001000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004009a00000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000010008000100", @ANYRES32=r10, @ANYBLOB="800002003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000080003000600000004000400080006001cf37affe92078e11803845c8c2ee40b9199a99e207867fbac41a4658d04f08f9c3234ca538fe2ea825469d3b4fa7c6697018659a6307021fc", @ANYRES32=r11, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r12, @ANYBLOB="100102004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="4400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400010000000800070000000000"], 0x2f8}, 0x1, 0x0, 0x0, 0x94}, 0x54) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) recvmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f00000004c0)=""/242, 0xf2}], 0x3, 0x0, 0x0, 0x4}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x1000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:08 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0045878, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:08 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x3, @stepwise}) 05:58:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:58:08 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0045878, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:08 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x3, @stepwise}) 05:58:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b455845435f494e495452414d46d35f434845434b2c6f626a5f757365723d2f6465762f26a42c00006a5f747970653d2f6465762f6b766d002c516ed7e411c701f26578743d757365725f752c00000002000000800000000000000000"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0189436, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x0, 0x0, 0x3, @stepwise}) 05:58:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:58:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x101000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffdfffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000140)=@v2={0x0, 0x3, 0x8, 0x3ff, 0x6b, "86dd41776b3a4f0fa216564324cbe54d2e609123bb7cf58bb5afd88f5c4402983515980926ee1deb670792167ea52b4fa2a145d18f5dd608f9e88f42617a4d43343bbc33bfd32b821a3d277dd6926df5c0af13d0baae969e26c3b66b0478d00a6be955ce173281ecce6ef2"}, 0x75, 0x0) 05:58:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x500, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000047, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:58:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x50323234, 0x0, 0x0, 0x0, @stepwise}) 05:58:09 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000a00), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000940)={0x6dfe, {{0xa, 0x4e24, 0x8, @remote, 0x1}}}, 0x88) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r7 = getpid() r8 = getuid() r9 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)="ebfb87e7c508d1849fb1abb8145a428d70efae600535678462a1a907bdb4e3fd989131269b2ec957f9bdbc2c9e3d2fee48a90188ef7131903318846a8f2181b615bac5fc2b6a373255e12b9d5e2e02e948", 0x51, 0xfffffffffffffff9) r10 = add_key(&(0x7f0000000b00)='user\x00', &(0x7f0000000b40)={'syz', 0x3}, &(0x7f0000000b80)="09d7ccf11155f915e7a8abcd5acb78efa1b8a9661b2738c52cf529daedef51174755dfa5c2a3360695f14cff2e98f6a1c9e7009594a6c752c984e59875ab9c02664aa9ee755d2acfc7370f982020be606b4e9854c4b91577c5c3da2cb3b6381846935dec46d061483534190e0d3f9d658aaf3a6cae99275123e0ecf04ef62be1f5bd6631fa1aa8f84a057a2a481b6288d18b1811e9c8595f38a988ffc045f69d0d65983793d397f8e595828452e91cb1b9197b", 0xb3, 0x0) keyctl$link(0x8, r9, r10) getresgid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) r12 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f0000000780)=0xe8) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000001c0)="910245d7d755e9e6939da2063505bdea461ba8f5da3d8ee7d501ccdbc0ca5d0aab32ff4f2e85845de4d5a807016ea08efdb7f8bc83e215befb793669ec3676a1447c254850be83b1a80025b68cd9dc8c509f2ada946670ce8e2199a880a2dd00b49a46a0c4d2c80cf64a7ec82aa30a8c4260be2d10578c868a8ec025681b26fee0963fa8a052d624b5988e", 0x8b}, {&(0x7f0000000340)="7a9ce663af43649f3298f988b19e1f81be412ccd6bf2597ed53306e282f456dd0243ecf953e64f9bbe8d99e47bfc25362b0ab045b76b750397549d8cb2e0a16ce5f59d48adb31ff8ab97074f68745105fa537ebadcbdfb322625f296247bc4b20fd7acee605191cde2", 0x69}, {&(0x7f0000000040)="350c03846d91b7c44e5677571dd7b2a0ffbe25da3bd07b209f780ca1a878c87e20f77009b9", 0x25}, {&(0x7f00000003c0)="b3aa7c34e4be57f7fe2f17be74e30988192fa18188be3f756898b322504eb832de8683ab20c8eb9075435823294b306d9e49f430930409bec7d77cfa0b60458491a699c1c894aad3d48a42d1642a7dab5258070c93371b6fab0848c8688aa17f306871edc8d43f53676501087a9847fb97f40aa1857ed32ec14ff84739dc6e290f5babc10ab9763bff1dd86e91615782108fbd3ecb039397053e704c68b7f3c489b02a5234f3a232eda2ea4322", 0xad}, {&(0x7f00000004c0)="5b3510a05239f6e35d413e7874dfdd2c8b0f2e6c3cdfd3c48227487c871591a637b3506827e7d40566df295a51359a625a65ca62d74d1436f34d3e85713bffa944c265", 0x43}], 0x5, &(0x7f0000000880)=[@rights={0x28, 0x1, 0x1, [r2, r3, r3, r0, r6]}, @cred={0x20, 0x1, 0x2, r7, r8, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x68, 0x4000010}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) 05:58:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d3078303030303030303030303030303030302c66756e633d4b455845435f494e495452414d46535f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f624e5f747970653d2f6465762f6b76726f6f74636f7e746578743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:09 executing program 2 (fault-call:8 fault-nth:0): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x55595659, 0x0, 0x0, 0x0, @stepwise}) 05:58:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x700, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x3136564e, 0x0, 0x0, 0x0, @stepwise}) 05:58:10 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:10 executing program 2: r0 = socket$inet6(0xa, 0xb, 0x6) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) 05:58:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@md5={0x1, "b8a4a057316a0167afaa3a257f115171"}, 0x11, 0x3) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000f02000/0x18000)=nil, 0x0, 0xffffffffffffff79, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0xc3d, 0x2, 'client1\x00', 0xffffffff80000000, "02e55e947e8623a7", "314fbc4d381da6dbdfa156e631be5275ec9216b5deea1950cffae4e2730932d1", 0x5fec, 0x6}) 05:58:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x3231564e, 0x0, 0x0, 0x0, @stepwise}) 05:58:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d736930303030303030303030303030302c66756e633d4b455845435f494e495452414d46325f434845434b2c6f626a5f757365723d2f6465762f64737023002c6f626a5f757365723d26a42c6f626a5f747970653d2f6465762f6b766d002c726f6f74636f6e746578743d757365725f752c00"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xd, "2f6f7e1794a99ee63c63f9039d"}, &(0x7f0000000280)=0x15) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={r5, 0x81, 0x10}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:10 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x32315659, 0x0, 0x0, 0x0, @stepwise}) 05:58:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x71, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000180)={0x0, 0x8, [0xc65c, 0x0]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000), 0x0) sync_file_range(r0, 0x79, 0x7, 0x2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) setsockopt$inet_tcp_int(r4, 0x6, 0x3f, &(0x7f00000000c0)=0x8001, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xd000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)={0x8001006, 0x1}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x3432564e, 0x0, 0x0, 0x0, @stepwise}) 05:58:10 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = getpgid(0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x8, 0x100000000, 0x8, 0x1, 0x0, 0xffffffffffff4132, 0x41000, 0x8, 0x9, 0xffff, 0x1, 0xffffffffffffe03b, 0x1, 0x2, 0x2, 0x0, 0x2, 0x8, 0x80, 0x8bf, 0x8, 0x0, 0x401, 0x101, 0x244, 0xfff, 0x4000000000000, 0x7ba2, 0x4, 0x1ff, 0x1f, 0x1000, 0x101, 0xb04, 0xfffffffffffffff9, 0x6f8c, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x8000, 0x1, 0xfffffffffffffff9, 0x6, 0x7, 0xe6d9, 0x8}, r3, 0x8, r0, 0xa) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xfffffffffffffffc, 0x0) 05:58:11 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x32315559, 0x0, 0x0, 0x0, @stepwise}) 05:58:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x2000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000014c0)='net/bnep\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000001740)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001700)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000001780)={0x13, 0x10, 0xfa00, {&(0x7f0000001500), r3, 0x1}}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) io_setup(0x3, &(0x7f0000000040)=0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x40, 0x0) io_submit(r5, 0x3, &(0x7f0000001480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000000380)="e253e43b65dba1ca19c886c23a2e773cc0e9ac58d17d581898c46d8529ce83a1822be87342a632f2e02a41b848d796d3e8ec61a429fec9e62381aba0e8ee2750d635ae9dc7181b16b911d834e4b02eca6e19b97931af2e334ebfcf3e7a76cb1c74d9272f598dac8cb9506e1a952efb4b97933bb2cba03c7d9a4a663ed1d1ca7f3ff6db885f862740a9502a9a2a00274aeaa9fa38e981bf41acc2c679298c46021aff71a26a305cf76fd6d7cc549be2d34d2c6219b135ce31613779732d0a2e05e7bb253a9474f1cb188eda93317eb1da6f4674dcc967276bd6850da5a6e7eadf56dbfb3eb00fdd96f640637cab7887eae6f98541e126b3c2f702907b5bfbf475fd25d8d212a0996374e733b4a5b442292ee26dc82c6efdfd7d91b590e8ee12b6cb4f958effde1f5be06f4545ddf1da8be867eafd5456a2cfd39e376f6ccc7b43b4102b29e634ad355495178bc286f0fa5249e98b73022203b12d43dfd650e812ce52f466ec2a9aac5088a8d6ff44dd2fe79d2676922482b2248fbce2cefa9555601b5837c29a92c99a22cbc6da6ad6cf964285e61418f0fb7451e2c0a11d3c64c50c4354ed6dcc58fcf4cc17237fc867ed3e893c799c82d95633056cf8185176c5820f4d9ec003a6854add6b9ece63e10feb93b1f4a0f2ce24d71efba67d0db36a27b2a9e0234e6e2f863e498d469dd1f4ac4274441415550de4f36bafd1939b70d82343439efd47500f241990b723e144a3afcd29f09513c77c604d567f16ef0058c75e7eb9885445002b5b9739fb5a17df00c7ddd47e193aa766c98034310c4969cdbf80e8636544426c7a8fa999dbe208f815315232bb7940fb19898c11d24e36844e6715cd3bcb37f07d0d4d8ca8fc7aaac5e345433271bd0ed1a483e65f5bd011691dc41762dc654705ba65cd7e42c1bf82368c81b64b45c3b4b501baac0545e04cfe302fa90c4c86c771d0e7aa7d7e8574041ba01a18cb33468def9b3c40156ee2ca25283c2ac44d9b9bf364e8090134dbeddb3d9ef0ec88af3c684da2d8ea74f2381ce09b1f4f7248fccec7f75c655f9c2b9f65fb31f5ff67d6d449b7d0654eada5a10c852ce4b1470692a5e1c8d3f2d57812cf5e7fc9835223bfbc0a9d6ade44421bbcada2a20f92cc075a8635753591c6a6245fd952a6d14382195235121db0d6ba6a74599d231142081e1705ceaaafe533ab5b67d4bec876841e9700bbdb0bb6cab6a6a2adf5a1cdccb63fb5bbfeb0bd64124acd80c7d86c200458f89208aaa403a024a1b603ecc37e0fcec645ce65bfc094ea0113d5b4d236a9828e6deba5b6e3c1d64b63d1853ba5fc0cf5eed1534f2133e0d74f2c5d1759e2b5fc72e5729f9fc8f1a3c0a1328b6b1f83da678c01074cd84dcbe7a61c963149c4036138f77580a5d8c1bcb363191238e3e55dd1890b281754ed010f136638328c03a0ba4c09f7f761effd0c23e79e3b36f65aa2c849287b62b83251a95f57086a63d72091957cb855a95d35212087a0ccf6301cd3e435e9e185c09db60fd9bbc4ade81f15b4141553e5189c3318e0530efe778762c5ec1078594c08d3e3d5a48ff02912ee4ee37bfc6a8cee4f7f9966633bb08904fc4bde7d2203fb4b20e4bcb7977c1a7d6a45b9584bf8dc5f12687a1c37f859e67e221cdacc08808420f58b583794054e4e2325d82c6e8e645d6b118c8a87831cf8e99f3b17477d5b124c784a43793d38691c5cff17c7cd3aaba402df2fa637c9b7e3d239afb29246b571cb7a54ebd1aac51fafb4b212ec618263b08b86c3e36e83f737f01d84716864d4bf3e29c5aacfb93ad224a174c880e44de2b00b8915be67aa120f2d22439a1383db7c4b643d6ded7264a52706cded9dc340116b98b30e6dd31aa941320c718a6e2a78b76b2255efc4d10930f7099985d7d1182a0c854ab4190f4649e57f7208619724734d252d03d2713d5d0a930f6588b76c62e3fe8a001d42fac6eddf120e3ca403cd19f4cb20b8f880203295c8537a6af22ccd0de0248ea592aaf1ca1fe12bbab02f54a830a0e9967678f01ac28c3f0d9027e244eb82fa7e8cadeb3604e87c021147659239e7af8f42e90ce84b27c98b2d06422afa9c7b662a80df9f395ab0fcfa713850dccc570774f0b29f55c5c53f92c02251916a5909b0c887c7be972ce63ef972689a5244cd8353ee0aac0d61e1b52dfa19f9f0ec1aa974cdd1e0dac602de22f1fcb45e2f9cb6cfce55ce063206b6e4d76545bac5c02f8cce23631ee6884473a48f298f12abdc66f4952584c3520fd688f42e7d0719bf0a400b6fd2b864d5b8e4598f42ab7aff435608661144988d7e16156f557e352a6faeb4f3676ef21a4483759407b973eb58fb0fff99af089b34eaecd8010a997d41bde9a5a10f3f17da4be2c2f539e28aab4625e3ff353ab928b7b76e1cb161efc381c3fd9830cffdba39d192cefdf6e8199b3ab59e4fdf3dc2d16a8e84c52cb245e458092fe48023aa20c0944056d3b1235c3eb2a2d4cd34f2cb1ecefee932d37c7036c04a501d7727c671a0b48f32361f56ec242aa8b870c57c8e6083f180e4cad0491df885ac242f6a3283154deb327141077d85dda632855abab39830694b6861150b40d1ac5aa2b5812b64697a7242792fa5c7ce710e0757131220c603c960d75cfaf943017bd58057ad68502cba33d3c1efbcb4686f5ecea3c13955bba72287f11beaecc0e3f2bc8303e1b9245c303c9c52b6a77f5eb2f792e2672263b41e646c9a6ec327bf06563fdc9dd213ca754a576e7c72276924609696db04802c702ab92d449759ad064de4ba418eeebefa569129864f9d31e1b8c4d2b011f8bcd6f8ad48f24252ad57b69c8a467d454de4dbadab8499d6acf0b800e423e5e97ea2ed7b1fdd5c84fc899bfbbfb89460abc39733c3ff57e145596bb1f39a321cdf21555bd5a02dba00d558b6750f13346af1b31b71e683b3b2665965ceff7c776b11107b612d82d7176bd536870b9fa459fd07b7dad07f636d7df347ec846d1a42fa0938c6d1ad0d6b8070f16557ed4957b76b836a5cdaf92e75ef79489a83faa08705b39bb6bf938b615a8201f1d50b8b767756f74ef0a3a5bb58013dc9a2e9b02b53a0bb383febf303422021f513fec9a9b38af15dc1d3fe47fa84bde4b7921d0a80b92a26e048e04e7defd9425604c4827891ca71dc24d8c41cbc393976b85d6dae4af897786ae1b5564dcb8b23fd50b8e5f847f7fadd8697448f9e94e0fb870acd804ebac4b0b1f8d27af51e067094c5c8d07b541715acb4400a17711984232c8795cbf4ce559b7e2afd80f1901b357b5c0bf924806b7cd140e63b3b3cc5794f49bc4b5567a75dd226eea625d32d9ac850c21d35fab6cae38aa434713d7321c934c7012aeef68a33ee93fb7bb7a43999e62e626f8a1ed3e70fd07557d7d2142801887bf008ff2899a7728f9686b66be28e8238795cf218e51b0e1a325a2174ed8b8296c9fb4b455b3d8365a743142b2a5af96889aa4ef34a165440e8f9dc5ea006ae83345f3ca97e9fa8ed0e1071c6f1cb6f76de8f50a6aef23e282ffefe264b73947bb732c0179447209ef35dd3e99a0901019f17d71dd84739b4edefd81bb52580660b1fb9e4ddd7202d70a7aa70d1623cfcc1e22ed4118f6955fa9f32e0be7ef51512aec51cf999fb4ba560d87e7abdb01b1b9100365443fdae91ea4df12d29a5fd3c772dc2336eca2db98189aa54fcf541e42c149815d30b118c0e51d0884470a07abaf73f66de495cc9d1e836b8fdf8c7590c3350f6e5e12e2e9796c68ff4bbcf8f2a8af42b9e85e0898b41c3c744726effa3ba6681fe76720b0df2c87c5ef0b0ba50745dee1ca219bad6b31e7ca46653152d68c838a22908d3c1860e356221cb169715ce633c7cab2e315094c924700a5e2d8db299f8e8437008b1f9cba5672536721ab10131f42ffe3a89759da16be36c5ad77c6f9685e940dc0efe3d3bc439408a0ada5ff9692ec8ecb981cf3f16dd27de1d01de629404e403c5b5f08b8c63dc09c37c520069abacfe63b459504967f237868a38b5d234c25ebd452dc4b548948673b68ca10e89d18e3b05d725709df819fec506c20c5f0db4089478d54bb00594dd0c6a90c82a18fca2169958bfc5b88f67ac7f70f6bb764df515be4ec9ec96aea7b17bf465d3bf49cd12229beedf4ffaa75c3411d9c01d4f05910d848fc8d6a7018d8d70a49c4539a7ba183f7c25aa711b57e7935014572df77d5344a690410cb89cb6cc9da5bf78fb20f463c49155346afdde33b2d3830146789552a061125e56275a0c887ec9277494884edde081288bffcc0f4c268a1faf7700203734deb7a032baf2fc2c2d5507395936a44ee48e7d54f1b3395127a44b59887dc34b3c64889ca08750a31556c9b78060016bf22cb0716f902998aaaa24ae28eecc019ab24f1bd25854c5929647584f2ec5545f6ba34cfec656fc78aaaaf02a578c7bbdb1fddc9c27f07d07b824d9f7b4d10c923369ef9cd4e5c3c94add61958e6ed2737eab61457bbc9c1b4ecc6fd26e69e57e97e5fcf478a2f7bd0c3bfa3bc7992a567cbddacaff3f9241a7f95a8d02c573f4ea3f1760988231aa960a30ff88e0f6e0a2b0813531f01ae54064b07a4c0bff9c745cae8198fbcb3d563e8a15b03254bbe028969c63143b5ec5c50dbc07c19f04cdc4d825d17e948bbceff0f278fe9831f6867a1c6f2906fd3d3e2c1b66734c624780d9d5e4fad0eeb4633d9b7b02bae6fa5de1906d5e68837839157ef9882279ca16219488cac1abc74f945ce88538de0cddb2a363c027d3331fc24f93d1385c722fbeb1574294a2a1948493146806df6946024567f41ee8312c792f4035b35adab2dc3e312cd480cc6d15648317ae1656b0bbef068092c12cfe37b1def6600afa08e41717b07efad994fa3388b6fe6bf24d719d03017486f8121220ac6591445541c49dd65e4c474a3c712fd8b2cb08d2f6a9a729c39a2d4cada389be4e9886474e30f22bec6668da5522ff4439a2ae4426d7a2e76bba140a686026038f814f633c5da87624328a6356d2924ccf9746055a5148ca6dc3cd3377072f6e9ea9094c4d6d0d6c838033f5bb9270c2f7b5591ae437a67289ba48e9d458a0600c57ef51f83b154241e269c9f0ce671e5a9b80cff1712d1d0693e81f5bd8e33ac90760690caac2ef894a4783aa20e287c8b0f0fca5e9b0ad846fe9aadaeebb37634d945dbe38b57eb91cc3338bb4f7f38b7118e27753638fd4422b4984ee7566ef09dac7c81f4c189e2a3ce6db27257de090135915da3d6bdd42154131e329f9dd166a0e3e4b37f300791e31e93d6aac2822434231deeb8d5365046c23332500e545ff72c1937e8cec8ce40bad4232f790c11732a893abaec708b4344a28906829b83993401b4f45df29c74f05a428bf2de6fe0c3d075ce70866da83bde3d457bfc481851cbaeacafb175ad863769010657e4bbace829ffd8769c097a536de7cc19429b5c865cfa13ec7108674e908d3b5c83818e7949f297e9fa72ed7add628bd5e6844a71742acb19250d7104e50e1d2fbfde6e3281aebf5868886afc68756d42af870d57acdab7d73244de77669bdf24948f13e4fa514e73c94fc4909ad8015043b2f040cdb2d5080097adee0d7fb9ecd16b87a6b820d40725d5ca82abbf7b63c034217c6327fff80e4aac6c5f792ffbd80b11083b32c12e9ab4aab197d9f6082fdf51e6f0f1862d332728188b73daffb9baf2eb099fe1faeb9e3425f2129589bbb2016bfab5b2dc2e1482e7eb0476794aa8605de", 0x1000, 0x80000000, 0x0, 0x2, r6}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0xfffffffeffffffff, r1, &(0x7f00000001c0)="34dea8ebc599ebc0ae8c64ef4416baa57a171e70d9508c6b4d3b5b52d179e79aed9855042b75758f0ac35c0803fe0069f9a5c00464c296efe2b06f7ec5c7df40bdee8adc484a54f1959e6b297b44181f887f0b2d45dca77bec5666c65df8a587d67515e19a412d5391e6f7500685cab027071b95d42da03129e2c138a06453c11aa003ff3622633c5a0c5888f5087c8bb283a8a638a82bc874b7eee92abe9881fd5bdf941b3ee9c5026c49d51c36ffa20c09117865744882ffe35a8d1db660f7efa74689c364ce7bc938285c94940b68dc01ba6bf4d1fb532b899e4204122c58778e5ed1a2e9d23dd21fcad7", 0xec, 0x80000000, 0x0, 0x1, r7}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000001380)="c01e6e2c976f769419238e3e4b0da3cf5803196bdcb02c6422a2d71e10591a7f5311687cd177132a368cc1e1d5c1b96a418a817d80badec7c957293d6f50226dd59716cdf4ee1c082cc1217af79b4a1335e20d42771c2a1d774cd1e2ae5b8b3d4df982d6cc7d10869e7fde33a0d9e56683da7b45e3ddda741210b0b2a3a3ed9b01e61a4b7e275092e00ea4cf04e286aea0160d22f874f22a13361134013eefa4", 0xa0, 0x8, 0x0, 0x1, 0xffffffffffffff9c}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x84000, 0x0) 05:58:11 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x3631564e, 0x0, 0x0, 0x0, @stepwise}) 05:58:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:11 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x59555956, 0x0, 0x0, 0x0, @stepwise}) 05:58:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)="82", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0xfffffffffffffffe, 0x200000) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @ib={0x1b, 0x8, 0x45, {"1f4d6dfabfcacb7da6d708f2f0312de2"}, 0x2, 0xffffffffffffffff, 0x9}}}, 0x90) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:11 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x3234564e, 0x0, 0x0, 0x0, @stepwise}) 05:58:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) 05:58:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x80000019, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:12 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x56595559, 0x0, 0x0, 0x0, @stepwise}) 05:58:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffc51) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = fcntl$getown(r1, 0x9) tkill(r3, 0x200000000003d) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x3c, 0x2, @tid=r3}, &(0x7f00000000c0)=0x0) timer_delete(r4) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000002c0)=0x78) connect(r2, &(0x7f00000001c0)=@generic={0x1b, "4fdab8880cdc990b7753d13f69b2ad2076d13ab0639d1668b43eb7e27a489baa06728803c85bbdb1d8f68dab7fa679295de0929f8e35c8714908387665d9d30ce5c2133341854cd57fca0b661d6b786ff1b3ba25ac21e4309e7daa6121d255db11305922090b354ba99e2760cda1e3d2ded4cc138738e04d6d92a7552ddb"}, 0x80) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:12 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x3132564e, 0x0, 0x0, 0x0, @stepwise}) 05:58:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0345667, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000002c0)={0x9, 0x0, &(0x7f00000001c0)="81c6d499de13be06f24b2abc169b20c70f43c6eac604a1d13f4189f4ba10a54c7e5609e6b1da744cc4f025055b16b062175e4192ff0361fa192efafd24c03a309f1e5fa297239601be35a63a6d51055aee8bf497b5a1cbc13f7f2b30fc70b98e973def4e1ac1915ebf2c78847a8499b47bff609e73f873c6ca24a17af0c1a1445e39aaf7f8a84f8488d248ff10d54a4576868bc523f290c0abfa53599b918c8bedce0752adca52caa2f6052b7493611ea04228d91dfb699d9cf26cdd895b845046ff40e0ab505560c5095b846a14cb0860b295fbc8cfc88dcf37af", &(0x7f0000000080)="646ab5a73e01e4fbc71304e0747991008e5d0b9af439da94da24616b1306b15a98b5ae875b3599499a61d0730ce22b8ace82e870594ad158f2c7fe7d79954e9c9725c47fe271778198831699cd3458955e27fb1bb3ee68b1942e92261e460d86e7847889ac3ba03372e4d195af4d", 0xdb, 0x6e}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:12 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x59565955, 0x0, 0x0, 0x0, @stepwise}) 05:58:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xa, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:12 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0xcb, 0xffffff, "7126a71c6ae36835d29217f74d11650543bbe1bde0164938", {0x2, 0xee3f}, 0x101}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x3ff, 0x440, "05d41279e0fe9c63fbf7a95c5b2eec3b046c970d817cb518", {0xffffffffffffff81, 0x1}, 0x3}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x5, 0xa, 0x1, "02999418a8e4c7edafce0d17f0be616d993586e50722dd7ca158d5c29f81b660", 0x5655595b}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) [ 2351.519703] sctp: [Deprecated]: syz-executor2 (pid 14961) Use of int in max_burst socket option. [ 2351.519703] Use struct sctp_assoc_value instead 05:58:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:12 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) waitid(0x2, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) 05:58:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x6, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000700)={[{0x3, 0x3f, 0xd877, 0x1, 0x5108, 0x5, 0xfff, 0x7, 0x1, 0x2, 0x7ff, 0x53, 0x6}, {0x5, 0x7, 0x8, 0x100000000, 0x7, 0x100000000, 0x200, 0x401, 0x1, 0x5, 0x5, 0xfffffffffffffffa, 0x1}, {0x7f, 0xfffffffffffff800, 0x1, 0x9, 0x3, 0x100000001, 0x67, 0x0, 0x7, 0x2e8af2a9, 0x7, 0x1, 0x80}], 0x7fffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000680)={r5, 0x800}, &(0x7f00000006c0)=0x8) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) r6 = getuid() mount$9p_xen(&(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x80000, &(0x7f0000000580)={'trans=xen,', {[{@mmap='mmap'}], [{@subj_type={'subj_type', 0x3d, 'wlan1'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@appraise='appraise'}, {@dont_hash='dont_hash'}, {@measure='measure'}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}]}}) 05:58:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x181000, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000003c0)={r3}) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0xb, @output={0x1000, 0x1, {0xfffffffffffffffa, 0x9b24}, 0x7, 0x8001}}) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() syz_execute_func(&(0x7f0000000080)="450f1882b89c0000de3f660f2af3c462ad40a945d20000d0000faefa4183d8c6410f01f9660f6102c422ed9b84970f000000") ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000400)="cfb1d219b38062249bc39afb6d954dd98c6791a39c079aed05c8ded177fb4d2dd7bd3cf08e17da8f4634b940400d116d48f3c2af41f168a63e007cd1fef3e2e2ccd7dffb565197ef982e5998c4f4f66308545738f286ff10c0906e0b663834d3abdcbb30608fcad8fe6d7411d243571429cfd6dba13f324e3b7f46ae3eb38d70730fc268b61a58398adbbd78dae03be1e25236944c2c76cbad2b963db77aa6d54f90b8d13472d0486cc5aa2f0ae14801728a63a75be4902ea5810afab34e88bb35f4d516ff6320e38919ca3a589951fde9d15ffe1f1b424c063d49916d617515cea744cd13e7f7dcc4f31135faa2c4128efe") ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000140)={{0x1, 0x2, 0x8, 0x2, 0x6}, 0x1, 0x3000, 0x8}) writev(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:13 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x40000000006287, 0x20200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x190) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) fstat(r0, &(0x7f0000000480)) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1ad1) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000840)=0x0) r9 = geteuid() getresgid(&(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000a00), 0x4) sendmmsg$unix(r1, &(0x7f0000000980)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000040)="3b7d6e351ceb81dc5f689810a3f71e19d4133ad2c01782729884ed7663606523e8075180ddaad9136050e6ed17", 0x2d}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="200000bffe542523dedb2000000000d200000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0xc080}, {&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000580)="262732e882a263097d5db1842c078165ef39df05357978ec9092c9c1a655ca73270fc83b24b70e40708d4f71401d01d0752b0688f7d351b1369d3ea0774dac22a24d244e3cd1c6ac1769031824506e7629d36d0a2ca39374f587bed95e6241f9eccfdaf16320e1b8105d5b4e54d919d6d11dc071ea861bf3877b41cbbb2f1ad631ec5197b82212a1dd63ead5497fd3a38602806a846cda958b98b36c26c754aa09bd79ddc8a932044f93a8e3ff8f2c0d7698ec41b150910edf2c48ffdd1163c69613233f0f2025b8d032021b7e806474eaf0dd1ee3954829f04f", 0xda}, {&(0x7f0000000680)="7f8ec2d9a6b91e5a9cc5edc96f2778efe9bc4884f513c896090d7c3f154cec8d40ed03ccf7a33eccd29a1eb65995b6ecfd8a3bb7a774b6bbac03940bba4e3e6a88dec91c3529a99162cd745608589122c1ac8e300460cbd5b9cfb725387bff3f4e35f18ed698a0bd7eb859d31419dff84d104ba358ad5797bc831ce1bf6a376ca3266c0d2d294797660be55b85b55c29a9ab33fd689a4746e4b2568bb0ef8b", 0x9f}, {&(0x7f0000000740)="645e9240b1a321eda246b6034a57e4a328e9e676ba6c728f930f92f0fc45ec75e8498cc4fa61913faddd6e7a84285c767839", 0x32}, {&(0x7f0000000780)="afb7a9cbfa16737a146cfa9ad7dc7088a9555c89160e69ea240b4ce134cb300fc1ec808e50e1d5f93a975578afbcb1f4a1552dcc1667b2c382c26895145a8464f86dfd16d3b6867f33d6b838cae13e2e8711d141782e8d570c98f54246f5bd", 0x5f}], 0x4, &(0x7f0000000940)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x20, 0x20008085}], 0x2, 0x10) 05:58:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000005c0)=0x7, 0x4) mount$9p_rdma(&(0x7f0000000240)='127.0.0.1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x40000, &(0x7f00000004c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0xffffffff80000000}}, {@timeout={'timeout', 0x3d, 0x5}}], [{@pcr={'pcr', 0x3d, 0x2}}, {@fowner_lt={'fowner<', r6}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@context={'context', 0x3d, 'root'}}, {@audit='audit'}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) mbind(&(0x7f0000617000/0xe000)=nil, 0xe000, 0x2, &(0x7f0000000440)=0x1, 0x39, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@dev}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2, 0x400) sendto$inet(r1, &(0x7f00000003c0)="f8600d127ae87687960272a4db70d16353df04e10d0c6caeebee85f271b95110aa05fece93697605ef905a105c6a3361ffdf6c5728bed5b6a4a6987306d5a0bb9862c814d716041688008a7840a10ba1a3998273433e301c23d634dbfd48d2b8c4b2e2d65be3ece96e492190b79996865f7d935c498cd4f4aa09983affe4a9a0adca1c1c4db1a94f2b1185bc24a372b905071a3e4fbaf4fc91383695947f", 0x9e, 0x14, &(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0xec, &(0x7f00000001c0)="88a4af2b59d5d2c34fca59e65c8860f275ee343ff4da75fdb05a592d1576b4d5229e8a96d408c14ed6be92b9addb5e649f7d2c0fe91f055ed69d4182cb9b750d8de6bfdf94f1aefdf6db97290adbf0c4bdc081fb2d112ce0181ff4c3f560830d6e6346dc09dec5aa41216ee5078c3fca0420e1b2fbc231c898f241914a10348d1c3a0f6b854068a6d34c336fd44b50a00f9303cec319976d7f51854a5a0619cf55a9bb1c60e4e8a1e21fa6ab1ec4f052413c12cfc7fcf57c398fadd7c58e6fca63c3a8e4a56bd9660122c337f25172ed4c98e64666c71a00c02e18ec9a12ab3c7c4fd4eb247c60f4481eb0d1"}) pipe(&(0x7f0000000040)) listen(r0, 0x10000200003) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xff, 0x0, 0x10000, 0x8001}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380)={r4, 0xbd82}, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xa00000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:13 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x1, "34349c47d9e66a56634813f5ad7f916fb9295664c8532d43cbb8974e5a0fc449", 0x3, 0x100, 0x400, 0x88cf, 0x6, 0x7, 0x3, 0x10000}) 05:58:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @multicast1}}, 0x80000001, 0x7, 0x61a, "c4f4ac457104b969ed3b9894b108877b082a324d8ff25fe5000335938c7cbb3bd9d3353805eb8fb2d84936530a7abca915332a808a981f16d272accc9a4564dedc9a95b4370d14b4c65adef68173b2f0"}, 0xd8) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xd7, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x40) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="cc50dd5fa760d05daff1474db2dd469894d4600bdd7de1832be53b319fc93e42323e0ca85b2491d6047299a503b50298c873b1def4b47827bdebf78e2f3be2de2ffeb5476c4ff919438599393ec26dde74b64aea8726d31f09849e69032b3180248c63385120e133045b168ed8fef71b62ec25410d44db17192e8958610735ed2d13fe6d5ee6d93896768433de046d10cd028e3de486181ca4f4c3c46f6528517f36cb787e418c2473a4ceacce180fe271e71d52170735d800d6401685c38f229ad0de6ba569dfcfff26b020253d48de", 0xd0}, {&(0x7f0000000380)="2e666daf340fe85ff24cfe418efb5355b2f39f96a53f5d9f5b638adb55781362f22efff2c6932a258f22a59822fed77f2047fbc7d9641c38c21aac0d6ad18d7ef54b41727c992c411b38d65aa78cddf311dd407f7991670ec792b2d3b288695c2eb31eaea92bd41250d8cce31a26c5952e69a89107ce968f78cb71099f9970e0116aa50a5f47de617d9cae3c2ebccabb6085a2208e88b136b1b18dcfeb148b16a32d2f69802c65692908c0757eb2645fca1d7e153e6af8326b656e74e3d81b99f1df1737e9e39c7453c7477a72ff5e", 0xcf}], 0x2) 05:58:14 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@loopback, @dev={0xfe, 0x80, [], 0x17}, @empty, 0x0, 0x6, 0x10000, 0x100, 0x8, 0x200, r2}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000300)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x2, 0x0) 05:58:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f00000013c0)=""/4096) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000140)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x255a, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xf6ffffff, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:14 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x10000200003) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xfffffffffffffffc) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000040)) 05:58:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:14 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:14 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x600, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40800, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000001c0)={0x3f, {0x7f, 0x5}}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r3 = accept4$nfc_llcp(r2, &(0x7f0000000100), &(0x7f0000000000)=0x60, 0x80000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000001440)) syz_open_dev$video(&(0x7f0000001280)='/dev/video#\x00', 0x4, 0x400000) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'team_slave_0\x00', {0x2, 0x4e20, @rand_addr=0xffffffff}}) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000012c0)="36024fa7759cede704b7f66d631df6adf209f9bb0b4140cc45dba237bfd7ab5276b55193588679f6b82ba6544f9b6d65638d8672c25ba6f33bce463d467f4b947043fa3138644b18024ef9bae867c7a4ffd9da232916b2456d32ae6667eb430ff548bf31adf587f94e415bea7f0323977aa4db5212dff3befacc79b3c6ca24a8072356e5278585b4be2bfea5a2df079c7ae241f3429cfbf2ea7116ab602b7169486a1e2031b4fa3233709a25dd77e4fc90efdfc281df535ec63412c994a8fe8905c288c65d0045be3fab4651870046ab659f65e11b6fa1598fb755cbd78b488b0ead2d22067931cde64f21a614f1833b351004ddd899f6cd037b6764", 0xfc, 0x0, &(0x7f0000001400)={r4, r5+10000000}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000001480)={0x800000000003, 0x20000004f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x7, 0xfffffffffffffae5, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xd1c) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x10000200003) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socketpair(0x11, 0xa, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x8, {0x8}}, 0x18) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000580)={0x9ef0, 0x3, 0xefda}) socket$netlink(0x10, 0x3, 0x4) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000680)) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000200)=0x8) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000007c0)={0x8ac, 0x6a9}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7, 0x30}, &(0x7f00000006c0)=0xc) getegid() setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000700)={r5, 0xfffffffffffffff9}, 0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000300)={r7, &(0x7f0000000280)=""/95}) writev(r6, &(0x7f0000000a80)=[{&(0x7f0000000340)="8f1c1a44a66a4c0ca1ba2b2a", 0xc}, {&(0x7f0000000780)="1da11a6b8e5c23168e1102832f1d6a4dfd81b1efa5310ac3fcf15daf8b777438df748fabc8b05a07d6c007329d15", 0x2e}, {&(0x7f0000000800)="1152abf89a9f0b57e3f5499f06f1925de8082a6d8d0d000a834beae86d427022421b81686ad56b124606fabb92ad54316736fb26252c1ce2f277ec7342531893049d7b9c02d828367c1c72441ed590996e1486d95ce5491107ae05880785e45554a62566018f7c8833ac316fba560ce68ec11732e320f3c44b5435d47856", 0x7e}, {&(0x7f0000000880)="5e95ec1727c6d868a3c3d89daa9a18a175d45518a05e7797ac529b85443582e155f683619e763fd5966377f21aefb75bc8bdad7ad75aa15d449a2c8df68de6b52f70f2f2cc040fde3964272cfe957c9b413ed98985cdeb4fc78c3943f1f5ba05ba12a06929fbfc8c2daaad866e566f61ac045ba9ae74953b", 0x78}, {&(0x7f0000000900)="ac2ebd0c996b35bd678d0a2e226b7ab4aac6b0bcec1087108a3d5289ea7a4f4e46a88a829629d55b23361efe581fdcd87a2feb4edcaf47a09bb4ee808c7e73f437c80cb0b2af5dbc0ee51ab168c2f18ca4e288d0a948000d92a5f5c3a225a0f0258a5b1365f427e948c80212f5be4beb1ab2e9cf0adf79d45d304254e61364e3f245cb9534301983b832", 0x8a}, {&(0x7f00000009c0)="b38577d98e39b59e9dde9875a9d3c3e905182e9279fd6dc9895be918b86d08c2cf25ab6b7fb595d64439af670c6bfd25d18dd8ac5eb8e1cc648ca8", 0x3b}, {&(0x7f0000000a00)="a96a3ef7e63a8a63933dafe253654c9f02008b74885f9d57beac0fcb7b32bf4348c37bd1fbbcaf9d24c160d36831e390229c0566d737f8ac70cca4cd7d95ebab3148c2a8acd1b069ebfd78cd4d419cfd73674492868f6bd23fd907552d7ad74af44315", 0x63}], 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, r4, 0x0, 0x3, &(0x7f00000004c0)='+&\x00'}, 0x30) sched_getscheduler(r8) io_setup(0x80000001, &(0x7f0000000740)=0x0) io_pgetevents(r9, 0x2, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000540)={&(0x7f0000000500)={0x1005}, 0xfffffffffffffede}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:14 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x800000000003, 0x4f565555, 0x0, 0x0, 0x0, @stepwise={{0xf3, 0x1fffe0000}, {0x9}, {0x40, 0x400}}}) 05:58:15 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x103000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x7fff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={r2, 0x0, r1}) socket$inet6(0xa, 0x6, 0x100000001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000180)={{0x0, 0x3, 0xfd91, 0x3, 0xfff}, 0x3f, 0xffffffff, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x3, 0x0, 0x6}) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x5, {0xffffffffffffacd3, 0x0, 0x6d, 0x6}}, 0x20) 05:58:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0xffffffff, 0x200000) sendmmsg$alg(r1, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000440)="f54ea9aa65cbd9ff27e75208390b4f6c3b7f6cf1eb85eb15472ca53ab821e819dab1db322be3999849d007ced506be9df729e229ec6624ca867cbcebb3cbab53c2ca865327cd8665608275804c6fc15e377860a939ab80d274c03303b273df1a1fdfe9b6cf086b81387bb20e39338dfb4e7877bc684ea2d0a577628317ecfe766a0479d06b12a34eef0e0cbef2f78c31677f82906a7d9d8999f9aa1ac182d7f58708c3b3674b4172a6483746d828b6aa087c6bc53381c0b799f7476dc929bf05f2d4cefdc1d10cb948ac672155cc5cdce4947d4c93139ef69086168dcb0c98e974f12bba18d405eb9dd356c382c1cc15090333e881bce9d3513cae76a4976682117ababac45d7a9894ac22d9bade759f61cf56fed7dfa223f36bfdf76395811598d88124236abfaf444808f334fbe81587da7d30aad6424a78280b10b83d76671e38875a37037cdfa63f171cf225040dede51fc6efd36b823e196e3a272e28a9a25307c25f30f45458d2a0d9bce0feb5470a6b319a79d1af0a935b8104ca7a042e1aa8cffb1723b7caa09f894be2de20b3bd1eb3b1dcb0839fcf6a57f5f61a9f9de9cee5483ade67fe50c00347f2d2acffc3046feda52ed512509f788e07e1fbf1ab600235fca4fd66979759de06df25e1e4a76bf73cfd31c1ef71cb3488c612d41816e231afa4d5d1859c2de40bfdcb68eea90fef1f7c285156d3d21b73e87c1c428d8630d6ac76dcc7209dab47f6fda12ce8267adea4267341788e973f035d0ee2e637dd8a2765beaf3b4cdfaee6b1e0808824467de4f600a1f491c89d941fa5a2dfa42dd2f636364621d1c6d263f3a80bafa338d224c1bced736527bf47fa5c968f8492c8d392699121a746779b63290f45f3474a453c80fe0d58faa4fad967223c971433111b7f11613088c368722d114395351fe2a934878b5355f736a0eb3a11468037411106144fb6c6b6545217fd930890c90c532732537376270df18be979d47759276650c45fd9ab1c022f736967c851d8cc4a74c81aae45dd7d4a2a5bb5137e9b8bed3fcead63c2c0ba2d9257a98060ce393dce7ca05dafbc0084d42ca2105a30922371889cabfbd21ef1f88808c007f18d456d2335eac76b4de9d27029aaf78698ecd3da63cd5bf31ce8f28b2f794a7b81b8ecd43c075878985ba20c3aa0f84b6881c95764775295b39e22d88a606117a54773e5bdc5692d54746e63c67301b36ab86ddec62d449c5fa9c9b295676335ebc6fe6688843dc78c343caa33685d07fa8a8589f24254e3ba82b4e552e76e577e89438b22196eff2a87abb56b7b99b2ff88e94ba37e78590423860a01001aecba7f2a744f76e5ef60f7a51fbff238851d6526c70c0f5475dd54fcf71b144d490932f9ac4664a42520314a1c3863e0748f97ea1452669123fd3108490e66ef2e1f2abca925a25add605717613cf1bb3f35388e8f80e85082680048d89b90b68806a47410002ab3ddcd0f9d598a3dbcaceef4dc057c13f0a6912fce7adb21e6f5b85adc44a697562106f001086e6129ee50533e880121135643014a4b1b29c07574bad89d2980eb3b11cfe1b05fbb360d8d810f9383690d602af5a056894052a5dadefae56d5d6d48f96d8cafe972f28b9baa7539b3683323786db4c4cf7ae642fefb2b791abae0e8035f24938980b9648db4d0645de8ebd1f2d3935a58a34dbd74bb755db1ca3dc05360ba168e93c9ed7e24114c1c96ed80528906ea12073d7ec19e63332006b44f4f4477388e2f485f6488445addce280c984e428eb26e83c21ec41e7667a75ec8c4e86b198f8f9e303f253e0b60eb59ae2f7754aa69ccbac8925d6ae202f7105e74f4eac1ac13e9deef5769d3e9ab47b50d41790422db1589f663bcf7b4c2f06ef0bb8a838d59bd71e3f72889a86858104f9848aa89cf2f622c1ed0dee6b1dd14da172dec5c765a5398e64274482553092d0a58e97167acc453fba4447d4ad45a49fd65ca0081c7eb92adb85db2c9518930ebf9bc2933ee7343877eb2410ce1cc7f1b79ee65c7c54fc4c85290f06d5093872538aff4ea975eac019a8d2ac7154046603659cd5a57b776e19a3b8bf5679c691d124f7df2c9b5b37d8b99d1595e7ab58f3439536f0f37094627557674ea6fd20329ca1ffd87c6e8a81466744bcd52944304ad094b20824b0810c2f4df0062eb4af26c1aa97b58b06a998e8245dbbaa6d596149da251d82db92476f2576cedb370eb05d6f95cf210e903af388dd167e6575eb2680350a520e1770e5e45e5ee9ff90498e97c88dc9b9fa14d2c0246b96766f9849b440e659abbae50c63734461522efc97c13ff60f70df7429ffb022118ca64e2262d139bb8300120586ef16689177741ece6767f456ef25ff509eb587a31f3681d52223ec6820f80d3546224cdc9679518253d3a099c657c11dba9626368d6976a2bf825dfbb951df737274036e7b7c09a20ff329671c70899f83d6109f6cdfbc2707d645f28b63e02057dd7e7695304b439b10d3235c04110565dedcef696b34bd861147bb90c724f601dc026289e5d515709943ec065c18d319f54c2a6608000e496fa7dc1b7b5246fc62d43acc0a81bda20137691ed447da7a7bb322aa87a351e58c17b5443e17d609a69b628e51020ebc66e693f57deb5bc0da9d60a13942888adc702daab023986b17530bb116350560ca0c3059db147d795a83affe49bdc65f1efb761e0e1ede6b10f6392cf86be3cb70afe7528b5e248dce221139b049ba95859776df89ac84e193af0c2db7d374db54f5d9660f631b1693d3bfbb5c30c7278d6204b10aea164e4d66dbb5247fe17f04b2183001268cc92713d9cb1b741610b92e04fce7ad2eb826e4d02b2f62fb0e4c1ecdddaf84be3d1fcf26158b8cc798875d584c5b1af61e9e41307a58b9ee3360e161547373965a064215d816bb7a80e8076d9fcf1b7f4ce0971d5f5de73c9994a77085b880f82ea7bbd78e613182a112a599de763b9681679bf5cf4c877bce4416990bbb82c4bb32fadbad6ef5b416d117779014cbeb61ff9f3c9772e3da4e15e329b682e471440574ac7cfae05a22f3a59e87b9008b4c449182605ba95395801d8bb10196fbf4e9867c144378a0ee1d8eb758486fac8377cdb26ac85812386f4f919ba259c0e0780a1ea4677c145b2500a0be7272d65f87e602bc432d70bd370e3178db0aaa485fda0d19e787512b2a97c22a4588159321b89b5dd9e9eb8e15100d2aec383bd44fc9f416bd04952efab43fb5eae4dad089fc659f770de09b491123a01d68d58c34c4ce99e10b6960816c9ab323e6e61a5d74bd81d1c8cb7dba4f13de196eaf555d7ff3ed1b84ef02ef8722e475e8d8c59d1e4107d9a4cca37445f1adff8b91655e470560f40a0d9d15ffb76020a194a0cd9584b17274665d6acd1dc3b8e7e5e0ae19f54497712d49f5e1fe9518d9e0d4184030a70eb8926b5a5cb472df937af70f773c1a13ad8eefad4561c9c8e79092904c14dd26422507d4b1743543a4308720d86eebbd50d2eea88cea51bf3ab4d84383cb34d97cecee67655a8bd2efec30e337d44c7a197c8fb8bd1c4f87b965bb4e88f6f585cb52d1cb01ea4d787a15e3b542f25ba7947f71159bef96c76129cf834bf7bbea21dfea24c42a4f29060b6ea449a7b1d03e356e0d5dc22e9a33b712f31079e319d27a7e22a99c9be9a0a00d3e373fd905f7e9749bbf4bfb8b4826c63a2dab235006832b21ad64d2792415f894c333dc94914d53f0dc824cb8e59a2fa69ec15e1ae23d7e7e87542ad3c6fb9af2d37dab7ced055e54c85cecef3824c687cb79532bc40ab1e17667b71610f8889fefde91e88159a500f42b2aae6614d292f53688919f7bd30646411d4c9d92c39d6be973c2ea59061f4c4188f13f1620266d6fe1cf879ee8c1d2437d36207eba5cfff0b62523afd08405ed139c5e2c30c265983ff5ddaf0c9d347e1dd673ae4f41baad3a6e26b97050726a32bd250d8da167adcaa3b9cceeb0b72791e0985191c9a1f06f37fe7d04fad5829cb1ff658344b6f5fadf40fb7c7c4ed6ad39347c16fcf02a517a7afd9505e4c3e213ff43d1c5d99519b2f175fe84a8da2833b71c66903e445827e5358def51534fc75404afe4fa62aaea753c8665248cafb58e71def47538b2698442bedb193a8811b9e1591fa0655f64385abfad68a6764b8e8d82468ba884d81ad6ea49146aed9ffee69596e0f7a846b524ddeaf2a21aa63fcb732998563a82af3c91d2bda671bed14e6069122d6be82937c3c32d100a60d72fb44a1ba20752ecd194dac0676c57170496fa8da6ff7eb79efa2d3878bcb707552ba7fe7fbbed74bd5c420efe470577163e9b5687c38c932e8e21c4b7bdd6fdbc2e5610535b1b76a8756bab08d6dc9560951584d6d9dc14dce46a5551558cae2048bb28f370045bd0b429888e6e569effca9ff3e5b02cdd4cb8a6f0324c6c39e2f914c8253cae32629b9a743f91996d76afb297ea2e89f7df5a4209908c45d2b2b8e98cbc42e91fd339d4374316d37ca164ef7e684284d3f2656877a51438c1c71f904f896b474dbcf66ee96421be6254b7bff1af088b6b45f887adf6d401b5f77b68dabd8c39840925ba7d4f5b00406f6201eaf6611cb02dab1926e87a48ba7c3133d6bdaa48fd778c9c2019ff3295ada78fb37edddb5daec30b32878d7d5f9fa486c92f8f70d86c9ffe58631712cbd9e820ee87114b5957c3a2931c4ad4984ab3aa84da5aade5a93dda735da8eced1dd28bc5f212e2ba6f6a47af283f075b4fcd95164b0bfd8bf560ea4768fdb3a8dee2ae5358e94db3687de897a664e1f4ee31754d3e53d6d64d9d3b0122ef6169b79460b282c8e66b212342b2061039eb0f4041a2f7121d06fcca2fd496527bab56076fdf879b83e48c4f78aad47c5b4f83ae6519dfe2bd8278f85a2c69c9137c939ce925594c6cbd4c419f3901a7e8dad8f4e5f459d6edc0e92559eafdbe280655dc75cb8597f1660a6e4a371d04e9821f53e73a9d5fe56f7f08c443af0a342a038be1a92621d2a3ad14f53296558db027e423383846f8b247e7d76610278c53e536858e616634a5a6578290731956de4f0380772919c077fb2a815904db1c22f8a3d5c7e0c273d5a97c6aea7dce800ca167ee3dcd550fc44f3a3aaf0b7f461bf24a4b3c05c9b39c86229962f42ff518d486e12e1f366dfb1fba7cd6deabebf82379880d10baf705646f61e2bf09dd1d881db4b41dae4f8ee08cce4b98e2b5aa8014d5287cd336f9eb671f813a12f09be41130534f8bf76498b5d807092b1b4b0a23925ac9fcb00a4b1fe88c78c5f30665a8651e52078ecf48d6c5ceda9b056f7a8b8cd012d3cecd1b3b2efa674380eabf3f69220e7eb7d49feea59d5de0719af70ed24f8d2233e7d4d7806967d7cc0b3993db6b146d6f9f9a1c0e696444c7d277d7e5c230c3b23eaadf95ce4a21ed73df4e01431a9aea3dcb50d4d1fb7359b64040fe76e845c9ee23045169d35d8598643c8a836229bffb62359c74e9a0543db4311b5d0ba8b2be874a7cb22c88cee5b089037abb8692102c747b0c7a06fbdf00f575684f5a9fb5ceb24d8921b34426bbcdfe6257be90a0333ee2bf9babf6faf013d3b6d70058aef9283bf67a903e0568153b20247a5f2c5ad5ae887efdcbdf8e9274994c9d4f5fd2815d8e7beb10097c8f60d0ae90d30da776211b7bea2fba9ad66ae7d74872aff28b98cbef048604afbc3e73e23fdacb973b1fc55ce2fee6f21f1ee0bd9263442418997a19a93ff5495c28a2324", 0x1000}, {&(0x7f0000001440)="02f03ea328b546fa822b934b7712abbe1295500015d1f90c76ddc3fa92e849b6404ca938c62383350451996eb0c00f4ac0597e1d6e505791a277b9bc6ddb548e6e757f0740777992445d5a0a544dd6d10577822da67607c21d76953a3f45afaa66eb09cd9b8dcb41c460774d0f02c4877bf14ee15c0e53ae2817cae720fd29ae0401b52643de64cca8195df24db943a1cae19507e2bb8a862de41a10be6d4a7e923d73775c0ac304fa34130e9e806d54ef438a2b87416a0666fc083dfaa885f0a4f683c3a57e34383049c718ba", 0xcd}, {&(0x7f0000001540)="d0968e01558f7b7c84f8a888616d7532cc0c721bea4af062984e4ab572939b632b6cc59d85d7ee30822726e7ca4f70bfa0c2fa2a524e43a18eba6e29ef244efccb8bb7cb03581ca080d411b3c36407392a6f82fab16bc9a2c443dff0377ebafd6830f31e71d5ce772b967180592e0a0e341a2e5d2488ff", 0x77}, {&(0x7f00000015c0)="6f8be0ab58a107750cfd83012b13cffb0ea1e14e467791eb0ec77a239d85407a99a275632f5da4c3cfabeb72cbc022d89121fcb3de7994c8110617f87257bd10854e44bee05af31a9eeafe9d64a894514f808d4d7067fa922f300d2596cd97e3b4d49be955bf255e603c044a65cb9532e0cb77c082359c9f0a2a9a44317a5dbd80fee6f60471157d889ef7e7eaf118166f4302c45d9665fc8f48c0c53e7cbac066198eec5c07b58b741b1fcaa171b54a50925a645849bd14f3b47942d0d758cbbbefbbc04c98d4", 0xc7}], 0x4, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001700)="c558361ffec65edc42756efe01c9072f51853aed6330f2b72d734212b6c465ac8202ede3382eaf6485c14d5f44f0691aa24aa68d704b97ccbbc8f023dc948a09ea94362b785a92451934b2cafcae3f624785b48d0c590ce2ec2399742f136203742b8bbf1970a94dfb96ce6fa7cf12bb4642e10cfd9fd313e57f576f8a15cf76cdf229984d4fcf7321df62782fa905ef5ca4cd631e75df7dbfd6a6", 0x9b}, {&(0x7f00000017c0)="432d1ef4194b94bcaa2f2bfbcad08b2a2c0d80efcd3b47fe27eb816739edf25a9127a5a1fc0fa50873caa3cc7d5cb4920a7608bcfc45652878fb0472044b4b6c61d4d02586d86aef442902d026e2cf9ca6c958ee13c8b9488c473f7af6e44837d46108b69841b0f08e583b4f38108b16555fb37fb29a96cf5cecde9805e97b86c2b0b8b3f2af202f3d65d218be33754e13b061f4958947639a74020a993b90c71790016d9a164d110e91f60e1634c56a4ff932d9", 0xb4}, {&(0x7f0000001880)="44e649101c8dce6b7c8250160ae9bbc636c88fdd9d8f6216f45741f3abaa46bd82a09c6b6c6b9d", 0x27}, {&(0x7f00000018c0)="833ba071eb1a32ba01700a08563709dd3f01ad9d813a54c5dc70a5e08d8bffa514913df214dbb061ed4439f9439a272edcd0935749a9387f7adb176d9590ae02bd2e7ca3acb5dbc638f19860ac45af6a1676e95fdd6a982311b5a269e10449e45af6960a6cad", 0x66}, {&(0x7f0000001940)="2b12979b18e35015a86c0fdc97904da465071b8cad65ce8695cfae96fe55e79772d9bf275ea6f4555fefad9db3c66d16f633372202a32dc4a3b5441030fcccec359f5d4466354629c946a04fb7d6bab181f1e25fa42b986343bc59eed204778e297c4d6913e892d37fbd2de6af2289b84bd261fd415d05145169f9b74b862129bf7e1b8e9772acd3d550f84debb9edf6021fb045267ca0d944e18fe3746ce7265db9ccb08e51ed09", 0xa8}, {&(0x7f0000001a00)="e237b2ff75ca612de4ebc212c7d338d816dccd9ade11226fdd3bca61ec9a45cafe6de7934e11ddad2957fd2aa208", 0x2e}], 0x6, &(0x7f0000001ac0)=[@op={0x18}], 0x18, 0x8004}, {0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001b00)="eeabb84907eac1142638099f82ad2c390b45f0171a998a093840fec4fa28e28cdd7a7ed1277f4f5b106e09c1b7a39842bf799f30d7a7b6d9724e76620bf694254169ffabc7b282efce99f65cff52a6269111e2738fecb50c193681a0fba938a9f7d15e39eaa8b1c709174e4f1f0b3efc00bd82a7d3b2fc4af4f152568512365f4cb7081f6096a0e7", 0x88}, {&(0x7f0000001bc0)="17ffded73d7ac40883e3ed1397bdb89403039086a872ffc1c56896155a226487c800197c291ec00ec1522593392c02ceda6bd6460fe0e931f7f45c77a5e1ef7668f97cf34544f684e196f34e3abb45a18bbd005ac317abfb9ef1da5abd1a78f684019135357670eca03fc41daf3f1e4eb3a111f35aeff2e87c476fe8cb26a5ea71fca3d3068a5fb6c09f", 0x8a}], 0x2}], 0x3, 0x4000) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e22, 0x0, @loopback, 0x100}, 0x1c) listen(r0, 0x10000200003) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000001d80)={0x4, 0x70, 0x81, 0x180000000000, 0x40, 0x8, 0x0, 0xe1d1, 0x200, 0x7, 0x0, 0x0, 0x6b, 0x1, 0x100000000, 0x1000, 0x0, 0x7f, 0x4, 0x0, 0x9, 0x3, 0x0, 0xe332, 0x3ff, 0x2, 0x20, 0x100000001, 0x8cb, 0x200, 0x544c, 0x80, 0x3, 0xfffffffffffffffc, 0xdb, 0x7, 0x3ff, 0x6, 0x0, 0x6, 0x6, @perf_config_ext={0x2, 0x2}, 0x20, 0x1, 0x0, 0x3, 0x100000001, 0x7, 0x6}, 0x0, 0x7, r1, 0xa) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f00000003c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/108, 0x6c}], 0x1, 0x0, 0x0, 0x9}, 0x10100) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) write(r2, &(0x7f00000001c0)="2f00dc4efa43c72d6d00cb5478aa5fb1e0de3b09ea686fa881405e770d1616bbdbb99a6006713861992354409bac9efcd8b8ebc5a7e2b8e8431c8f61b5f749d3865edfa6b92e8bd52cea8b47e4a9c943895ae0cff691477633cc30573fafd414f9fa2727c8cbf1213d521a3ae0709de050df5b4a360323126b824f62b8cf61ca75b7c7582d314fd50a3cfbab3a3ee3949faa5640482fb84447a2e4966fc9223caefd9f12703db566dbf2d39cfa7a2c2507a6c4641233f9b6f8348165e41c9036dbf51517", 0xffffff8d) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x700008000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0x2, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x3ff, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:15 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000680)='/dev/input/mouse#\x00', 0x4, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23}}, 0x1, 0x8000, 0x80, 0x200, 0xab}, &(0x7f00000006c0)=0xb8a89b961196c849) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000640)={r1, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = getpid() write$FUSE_LK(r2, &(0x7f0000000700)={0x28, 0x0, 0x2, {{0xffffffff9b326da2, 0x6, 0x1, r6}}}, 0x28) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000000)=0x7fff) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0xfffffffffffffffd, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000280), &(0x7f0000000380)=0x18) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:15 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x50323234, 0x69, 0x0, 0x0, @stepwise}) 05:58:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000740)=""/4096) fdatasync(r2) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22}, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, @in6={0xa, 0x0, 0x100000001, @local}], 0x48) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:15 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x628b, 0x400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0xfffffcff, 0x0}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x9, [0x0, 0x4, 0x5, 0x1, 0x1, 0x10001, 0x0, 0x81, 0xfe58, 0x7, 0x2, 0xff, 0x6, 0x40000000000, 0x8, 0x3, 0x70b, 0x1, 0x3, 0xffffffff, 0x0, 0x8, 0x9, 0x3, 0x7, 0x2, 0x2, 0x2, 0x97d7, 0xa6, 0x0, 0xfffffffffffffffe, 0x4, 0xffff, 0x3f, 0x1, 0x0, 0x4, 0x80000001, 0xf60d, 0x1ff, 0xd8, 0x1, 0x4, 0x80000000, 0xffffffffffffff76, 0xfffffffffffffff9, 0x800], 0xb}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000080)=0x1000, 0x4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x800000000003, 0x4f565559, 0x0, 0x2, 0x10000000, @discrete={0x5ce6, 0x74ed}}) 05:58:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x3136564e, 0x69, 0x0, 0x0, @stepwise}) 05:58:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x3432564e, 0x69, 0x0, 0x0, @stepwise}) 05:58:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x4000000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:16 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80100, 0x0) 05:58:16 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x5) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x3631564e, 0x69, 0x0, 0x0, @stepwise}) 05:58:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1f) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:16 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xde09, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x180, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0x3) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:16 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001680)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000000c0)=0xfffffffffffffe89) dup2(r0, r0) sendmsg$xdp(r1, &(0x7f0000001640)={&(0x7f0000000340)={0x2c, 0x0, r2, 0x3a}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000380)="bcb69a01f90a49580b3ab4027f5381fc71cb", 0x12}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="fa54d5befe65108f810df26eb49954382b02bb60680801984e980b5cb7694c5bdc27470554fe9984d1680d1a63", 0x2d}, {&(0x7f0000001400)="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", 0xfe}, {&(0x7f0000001500)="b16a0348b46e73c80952bb22e4cc4783a41db5d204afafb5b4a5de0a48a4cf716f7a0b96716f2d567665a7cbff544313a398f1caf1523108981ea98ae74339c856246670fdea1108e5b7dc945623e8debea63ce191d4f54891ce2bb14ebae95bb986888b244829fcbdd509d20582d0a0ced746aaea4c5f456aa710cd7136c32ae20443e6cecf0a986d554e438b16716579bc7ff528610972e9ba698711b3b15cc75bf1c6411280627d508f5d830d380a7690", 0xb2}], 0x5, 0x0, 0x0, 0x44000}, 0x840) 05:58:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x3234564e, 0x69, 0x0, 0x0, @stepwise}) 05:58:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x200000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:17 executing program 5: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7, 0x2) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) 05:58:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1d}, 0x7}}, 0x9, 0x2}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0x9, @local, 0x400}}}, 0x84) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x20000003) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='veth0_to_team\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x3132564e, 0x69, 0x0, 0x0, @stepwise}) 05:58:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x32315559, 0x69, 0x0, 0x0, @stepwise}) 05:58:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)="80e17812acd310a3537ba3f12ce561488c870400000000000000385856ad9c8d34af0a224809ce1ba1f87c0a843b1a61f459bb44680e138c4130a708e9b68d53bc7387f72e6680cfe2565700000000bae714cf45f259fac83b0984def10000a31d94e6075b708451952c38303b2d5f276c3a8b3946b8926433ca6f7bbc24e7b71d47a012a53edd7f7f26aa8e9cc2682a30a5a857adf50271eeac2934c3782992e614ab0c4715c9faa2f6274493ae7972e3f21a830f307c3b020efd2548a6ac6c1b11a6677da584f04b8cf4e49fa0f10200000047dfca26ed065de24e60df28e0a07da64b431f9b0fc973044fa3", 0xfffffffffffffda4, 0x20000000, 0x0, 0x15a) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@empty, r3}, 0x14) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r4, 0x406, r1) accept$alg(r5, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:17 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x800000000003, 0xfffffffffffffffe, 0x0, 0x0, 0x2, @stepwise}) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2000) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x9b0000, 0x6, 0x9, [], &(0x7f00000000c0)={0x990b6e, 0x100, [], @string=&(0x7f0000000000)=0x10001}}) 05:58:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400000000000, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x5, 0x9, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x2, 0x4, 0xfff, 'queue1\x00', 0x7}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x13f, 0x6}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000640)={@in={0x2, 0x4e20, @rand_addr=0x8000}, {&(0x7f0000000580)=""/177, 0xb1}, &(0x7f0000000000), 0x66}, 0xa0) 05:58:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x3231564e, 0x69, 0x0, 0x0, @stepwise}) 05:58:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x9000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:17 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x180, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x8, 0x80000000, 0x7, 0x3f, 0x1f, 0x1, 0x100000001, 0x3f, 0x1, 0xffffffffffff8001, 0x81, 0x6}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x10) getsockname$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) 05:58:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x8000) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xa32, @local, 0xfffffffffffffffb}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x10001, @dev={0xfe, 0x80, [], 0xf}, 0x3}, {0xa, 0x4e23, 0xfffffffffffffffc, @mcast2, 0x4}, 0x10001, [0x100000000, 0x3, 0x2, 0x100000001, 0x7, 0xdae7, 0x1, 0x6]}, 0x5c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x56595559, 0x69, 0x0, 0x0, @stepwise}) 05:58:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x59555956, 0x69, 0x0, 0x0, @stepwise}) 05:58:17 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x1, @loopback}, 0xfffffffffffffd80) listen(r0, 0x10000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f00000001c0)="e02f34df4ce92b730827153da9ab33f87ed149a5e37a7d836d9da379cf0b052e227fe64a5ada095271e6bdb837b20d7a2a2ede14c3c5f1e6ab76e87cb03bae4bdacdf5acdbd307decaef107ef8ccb3f5e34b") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:18 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r0, r5, 0x1ff, 0x8, &(0x7f0000000040)="83", 0x6, 0x2, 0x80, 0x3, 0x5, 0x70c1, 0x3f2f, "514ef31edcaaa634969a0191eead4e57d96e101958b951ec06997dea6a5f2d2ddbe6134466b90fd45c827d3df75363ad9918ed5f487232736042c63f100e917dd4242226dd20951bec8f32cc67bc584b747e77f10a73f40906085f1f71b2e50fb93f3559727d9cc760dd23cfbc0093a216a26ef15200bba34ffdb5ed691a84079b1e9f82f73324a45e5abe9f481b6c446261fe554da1b906abf4ba55f5a60f4b1596ac001ecd5165e2fa264226ce96aa39bdf8196fea5fa5458615967b99be8bf10878dc694b86ef317d9cafdd8c"}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x59565955, 0x69, 0x0, 0x0, @stepwise}) 05:58:18 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:18 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x32315659, 0x69, 0x0, 0x0, @stepwise}) 05:58:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) clone(0x8004800, &(0x7f00000001c0)="9d1ad70175973bc41e8334a87d98404ad93ec4f4d01e3a68a6d0b6fe9385dd20de2a28bb650ad4654f8f8b058605e10497c10b432af03084b1be7c09078e06dcaa8e83da4799c5d3eb16043098cf67d412bbc67467a0b980d188ca4555cc1e746a5dd899be0fc0b3ed2842be55a1b21339436378ef12263913ce7c5a8d127f03e4911a3f2b7f5b4766ac9aef6f810a9bd38b3f751a2820b49523b1ed3dcb352533f385dcc4316357e750c85b2f02a5fb338856331d72683f5d2764bdbc1f4974b05f2f57d06934b0dc4f20d9110e3def9982c27df04829ceaadf2e74", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000380)="b5a560c793a4d69d5afb2e7d414062f57f5f83151fd749c6d03d9628d870f024308b893183ce628de34b0887feaae765ee79c03ba7f300245c3ffa32b7f603bb4aff3607552de41017b5f57058c21f5b60d0bd1b5d59e79ee66d012bbcef5c53e8dcd9bc4749f3b25482352f4f4419443b7fc880df8018cc66347504a81d6c524efa807a04d7") bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/qat_adf_ctl\x00', 0x442401, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000002c40)=""/37) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000002c0)=0xc) process_vm_writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/85, 0x55}, {&(0x7f00000014c0)=""/92, 0x5c}, {&(0x7f0000001540)=""/104, 0x68}, {&(0x7f00000015c0)=""/234, 0xea}], 0x6, &(0x7f0000002b40)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/50, 0x32}, {&(0x7f0000002780)=""/230, 0xe6}, {&(0x7f0000002880)=""/174, 0xae}, {&(0x7f0000002940)=""/81, 0x51}, {&(0x7f00000029c0)=""/3, 0x3}, {&(0x7f0000002a00)=""/26, 0x1a}, {&(0x7f0000002a40)=""/17, 0x11}, {&(0x7f0000002a80)=""/162, 0xa2}], 0x9, 0x0) 05:58:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x3000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:18 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setns(r0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) [ 2357.456731] FAULT_INJECTION: forcing a failure. [ 2357.456731] name failslab, interval 1, probability 0, space 0, times 0 05:58:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x55595659, 0x69, 0x0, 0x0, @stepwise}) 05:58:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@nfs_export_off='nfs_export=off'}], [{@uid_eq={'uid', 0x3d, r1}}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 2357.550534] CPU: 1 PID: 15253 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #353 [ 2357.557932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2357.557944] Call Trace: [ 2357.569902] dump_stack+0x244/0x39d [ 2357.573575] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2357.578781] ? __lock_acquire+0x62f/0x4c20 [ 2357.583043] ? zap_class+0x640/0x640 [ 2357.586770] should_fail.cold.4+0xa/0x17 [ 2357.590846] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2357.595952] ? print_usage_bug+0xc0/0xc0 [ 2357.600037] ? find_held_lock+0x36/0x1c0 [ 2357.604128] ? perf_trace_sched_process_exec+0x860/0x860 [ 2357.609597] ? mark_held_locks+0x130/0x130 [ 2357.613839] ? __lock_acquire+0x62f/0x4c20 [ 2357.618084] __should_failslab+0x124/0x180 [ 2357.622342] should_failslab+0x9/0x14 [ 2357.626154] kmem_cache_alloc_node_trace+0x270/0x740 [ 2357.631253] ? zap_class+0x640/0x640 [ 2357.635011] __kmalloc_node+0x3c/0x70 [ 2357.638846] kvmalloc_node+0x65/0xf0 [ 2357.642644] video_usercopy+0x35c/0x1760 [ 2357.646715] ? v4l_s_fmt+0x990/0x990 [ 2357.650431] ? _parse_integer+0x180/0x180 [ 2357.654583] ? v4l_enumstd+0x70/0x70 [ 2357.658317] ? find_held_lock+0x36/0x1c0 [ 2357.662401] ? __fget+0x4aa/0x740 [ 2357.665860] ? lock_downgrade+0x900/0x900 [ 2357.670006] ? check_preemption_disabled+0x48/0x280 [ 2357.675023] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2357.679951] ? kasan_check_read+0x11/0x20 [ 2357.684099] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2357.689375] ? rcu_softirq_qs+0x20/0x20 [ 2357.693397] ? __fget+0x4d1/0x740 [ 2357.696856] ? ksys_dup3+0x680/0x680 [ 2357.700575] ? video_usercopy+0x1760/0x1760 [ 2357.704896] video_ioctl2+0x2c/0x33 [ 2357.708520] v4l2_ioctl+0x154/0x1b0 [ 2357.712155] ? video_devdata+0xa0/0xa0 [ 2357.716044] do_vfs_ioctl+0x1de/0x1790 [ 2357.719979] ? __lock_is_held+0xb5/0x140 [ 2357.724056] ? ioctl_preallocate+0x300/0x300 [ 2357.728497] ? __fget_light+0x2e9/0x430 [ 2357.732471] ? fget_raw+0x20/0x20 [ 2357.735931] ? __sb_end_write+0xd9/0x110 [ 2357.740002] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2357.745537] ? fput+0x130/0x1a0 [ 2357.748824] ? do_syscall_64+0x9a/0x820 [ 2357.752837] ? do_syscall_64+0x9a/0x820 [ 2357.756831] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2357.761423] ? security_file_ioctl+0x94/0xc0 [ 2357.765853] ksys_ioctl+0xa9/0xd0 [ 2357.769316] __x64_sys_ioctl+0x73/0xb0 [ 2357.773214] do_syscall_64+0x1b9/0x820 [ 2357.777102] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2357.782468] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2357.787397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2357.792247] ? trace_hardirqs_on_caller+0x310/0x310 [ 2357.797263] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2357.802280] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2357.807307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2357.812168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2357.817357] RIP: 0033:0x457569 [ 2357.820558] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2357.839456] RSP: 002b:00007f9cd63dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:58:19 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) bind$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000080)={0x6, 0x7, 0x2b3d0972, 0x4}) socket$bt_rfcomm(0x1f, 0x3, 0x3) [ 2357.847166] RAX: ffffffffffffffda RBX: 00007f9cd63dcc90 RCX: 0000000000457569 [ 2357.854433] RDX: 0000000020000180 RSI: 00000000c0845657 RDI: 0000000000000003 [ 2357.861702] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2357.868968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9cd63dd6d4 [ 2357.876266] R13: 00000000004c9b30 R14: 00000000004d34f0 R15: 0000000000000004 05:58:19 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000140)=0x26d) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x9) 05:58:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6285, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = fcntl$dupfd(r0, 0x406, r2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000200)=0x295997ffb380c294) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:19 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:19 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xe287, 0x4000000008000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x107fc, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 05:58:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x8}, 0x8) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101000, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)={0x401, 0x4eb}) sendto$inet6(r1, &(0x7f00000000c0)="801ddd5406203bf1e5cca0c6f004a62a579f070237a62aa7059777277df37455204ffa9078", 0x27, 0x20000001, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc0000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r4, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:19 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x5, 0x40800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000200)="8e922a72decf4e03ef2d4c49829143f697b93df85e429999db5b4fb4b6e7cfd98427bc7ecf5122439111baf94f1be23d233763b6007d9befb5fc3c1f6fa0db31fa7c8b2e2690856a2cfbb87747648429a193292c8d033f009677e4d01b1b40b00631aa2d71f04a00fa52def25c623873", &(0x7f0000000140)=""/55}, 0x18) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000000)={{0x0, @addr=0x1}, 0x8, 0x6, 0x7f}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) lookup_dcookie(0xcb, &(0x7f0000000180)=""/99, 0xffffffffffffffc6) 05:58:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xfdfdffff, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x8000, 0x0, 0x0, @stepwise}) 05:58:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:19 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0xc47) 05:58:19 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) chroot(&(0x7f0000000000)='./file0\x00') 05:58:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200004) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x4181c0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x7d, "9694251a22e003ab4829b65624cd8ac039378a526f4358c1b07cd920047b266deca4e92f824ee5c73cf1a176567635aabb4bd61f5b2268f3caeac1212f2fad81ad6d3e30d60ec547a7df5d4312238af8b2a52771681756a5e951e715f6f967220b40684bf4fcff79129cd6135e4e2ff1faba15f2173fc2e2be3584ec97"}, &(0x7f0000000380)=0x82) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)={r4, 0x8, 0x58, "335d5caa13aa26a0c6fde286a50bd36437faee08198a4ff3b6ad412c2cdec4273fc601341b053698f88b31206bbca8794ae013a44e771c78c8ebb25d97518915d566d8451b685bb2755be385e97428c42ac2b9834a0d0142"}, 0x60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) socketpair$inet(0x2, 0x800, 0x7fff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0xf957, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240)=0x6f0, &(0x7f0000000280)=0x4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0xfffffffffffffffd, 0x4f565559, 0x69, 0x1, 0x0, @stepwise}) 05:58:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc058560f, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x48000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000080)={0xabf0, {0x84f, 0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000000c0)={0x5, 0x4087}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:19 executing program 5: fstat(0xffffffffffffff9c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/autofs\x00', 0x10000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x20) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000540)='./file0\x00', 0x5, 0x1, &(0x7f0000000680)=[{&(0x7f0000000580)="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", 0xff}], 0x80000, &(0x7f00000007c0)=ANY=[@ANYBLOB="696f636172736574426b736f4c383539ff7f000065636c6162653e0000000000", @ANYRESDEC=r0, @ANYBLOB="2c726f6f74636f6e746578743d73746166665f752c6f626a5f757365723d2f6449762f766964656f23002c686173682c0018dfc33302eaf1df4ec970bfa7139f7f"]) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0xa73}, 0x9, 0x1) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000004c0)={0x9, 0x5, 0x4, 0x1e000, {0x0, 0x7530}, {0x3, 0x2, 0x0, 0x9, 0x81, 0x8, "7357c88e"}, 0x8, 0x684848b9f71f6a90, @offset=0xe5, 0x4}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in6=@local, 0x4e24, 0x9, 0x4e20, 0x7, 0xa, 0x0, 0x80, 0x88, r3, r4}, {0xe1, 0x4, 0x0, 0x4, 0x9, 0x2, 0x1ff, 0x3}, {0x7, 0x6, 0x2bd0bf4c, 0x5}, 0x3, 0x6e6bbd, 0x3, 0x0, 0x3, 0x3}, {{@in6=@remote, 0x4d5, 0x33}, 0x2, @in=@multicast1, 0x3500, 0x0, 0x1, 0x6, 0x1, 0x6}}, 0xe8) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000480)={0x800000000003, 0x4f56555b, 0x0, 0x0, 0x0, @stepwise}) r5 = syz_open_dev$mouse(&(0x7f0000000740)='/dev/input/mouse#\x00', 0x2, 0xc000) write$P9_RXATTRCREATE(r5, &(0x7f0000000780)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000840)=0xe9) 05:58:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0x2, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:19 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000240)={0x0, "a7375dc46e9cf497d40aa2643df18fdb7bbe090655dec1148402f18df196b797", 0x2, 0x40, 0x9, 0xffffff, 0xe}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/227) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x401, "96631945814c69b2c95ffdea3b5282a86fe76d8c4621f91f66436bbce39622c9", 0x3, 0x1, 0x6, 0x1, 0x8}) 05:58:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xfffffff6, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @remote}, @in6}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000080)={0x3, [0x7, 0x1000, 0x5791, 0x635a3ee0, 0x1142694c, 0xfffffffffffffffd, 0x1, 0x1, 0x400, 0x1, 0x80000000, 0x200, 0x44fc, 0x4, 0x5, 0x5, 0x101, 0x5, 0x4, 0x0, 0x4, 0x6, 0x8, 0x100000000, 0x81, 0x3, 0x8, 0x9000000000000, 0x66663e12, 0x4, 0x6, 0x9, 0x9, 0xa3, 0x3, 0x8, 0x788a, 0x101, 0x80000001, 0x1, 0x81, 0x80, 0x8, 0x100000000, 0x4, 0x3f, 0x8000, 0x100000001], 0xe}) listen(r0, 0x10000200003) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x100008aa, 0x400000000000004}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845667, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:20 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x220000, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)={0x3, 0x1}) r1 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x628a, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x0, @capture={0x1000, 0x1, {0x7fffffff}, 0x100000000, 0x1}}) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x2000000000000002, 0x200000) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000100)={0x0, "ae16a5cd2f5636ab37503a7374aafde7eca38dcf9ff0bcf61cf5e4f90285bd85", 0x3, 0xfffffffffffffffc, 0x9, 0x200, 0x2}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x7, 0x4) 05:58:20 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x5, 0x2000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r2}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x24000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={r4, 0xfffffffffffffff9}, 0x8) 05:58:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0x5460, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:20 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x800000000003, 0x4f565559, 0x3f, 0x1, 0x0, @stepwise}) lseek(r0, 0x0, 0x3) 05:58:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) 05:58:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000080)={0xc, 0x3a, "bfc75dfebdfc45fb24b450f61c03155306e0ebfeb4671553a15ea124ce4681771655f25a93e679a6f0df9a583711c14aae3f2a6aef20163f7060"}, 0x40) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0285629, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:20 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x9, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:20 executing program 2: r0 = socket$inet6(0xa, 0x2000001, 0x8010000000000088) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x172d) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x44d}], 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffff, 0x119540) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000240)={0x4d, 0x6, 0x0, {0x0, 0x4, 0x24, 0x0, 'eth0posix_acl_accesskeyring+md5sum(,'}}, 0x4d) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') getpgrp(0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) preadv(r2, &(0x7f0000000480), 0x10000000000001e3, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x200, 0x9, 0x4, 0x40041000, {}, {0x1, 0x8, 0x100, 0xfffffffffffffffc, 0xee85, 0xa28, "f6136e37"}, 0x4, 0x4, @userptr=0xfffffffffffffffa, 0x4}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) 05:58:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0189436, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800) r1 = socket$inet6_sctp(0xa, 0xfff0000000000007, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={[], 0x8, 0x1, 0x8, 0x9800000000000000, 0x7, r4}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) fsetxattr$security_selinux(r2, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:crond_unit_file_t:s0\x00', 0x27, 0x3) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x1, 0x400, 0x4, {0x6, @pix={0xfffffffffffffffb, 0x80, 0x575f5779, 0x7, 0x6, 0xfffffffffffffffa, 0x7, 0xffffffff80000000, 0x1, 0x4, 0x0, 0x1}}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)={0x0, @reserved}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x8001, 0x4f56555a, 0x40000000000, 0x0, 0x0, @stepwise}) 05:58:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0x5452, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000140)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:21 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0xb, {0x4, 0x0, 0x400, 0xfffffffffffffffc}}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) ioctl$RTC_AIE_ON(r0, 0x7001) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x4, {0xfffffffffffffffd, 0x1, 0x2}}, 0x14) 05:58:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc020660b, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x20, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000002c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0x1, 0x765d7959, 0x69, 0x0, 0x0, @stepwise}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000700)) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x400, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fffffff, 0x280000) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000002c0)=0x3) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000300)={0x0, 0xd1b3, 0x9, 0x5, 0x3442, 0x8}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000100)=""/91) 05:58:21 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x7, 0x76357d76, 0x2, 0x3, 0x2, @stepwise={{0x7fff, 0xae}, {0x1}, {0x8001, 0x1000}}}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xffffffff00000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0585609, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:21 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x6356, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x8, 0x6, 0x8000, 0x4, '\x00', 0x1ff}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x101001) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004084}, 0x4000) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000340)={0x7, 0xbff, &(0x7f0000000240)="3958d462f9862e2fee44d015f8c6ae79e59d33", &(0x7f0000000280)="c8f2f7bec9197ec4464b165e39b7360b7dc36bfac74c34460a05860e7fa48fae7b7403864c06e63fce6aed8fec76054a5b8ba5da4ffc27cafec8b114b37c83737f9cb73c2273b312351aea72186f4f95331597836238045acb27c622eb02a47fd7407f32635444ef8519ba098fb044313ce663e6569d413735fa66f787ab6ccb830f47c7ffbf2bc0eba562629eca2997fade98c87ea061444b85698cd100", 0x13, 0x9e}) 05:58:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) geteuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) 05:58:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0x4020940d, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565519, 0x0, 0x0, 0x0, @stepwise}) 05:58:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x2, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x800003ffe, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000340)={0x8ac, 0x80000000}) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x88cd, 0x800) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x1, 0xad, 0x3, 0x42, 0x4, 0x800, 0xb3, 0x2, 0x2, 0x3, 0x0, 0x753}) bind$llc(r4, &(0x7f00000000c0)={0x1a, 0x33f, 0x1, 0x0, 0x7, 0x800, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x5b, "31b71f87149f44ab573482985225044952d252f177c380bcbcc7654e2c7d9492f55b28bf27e184be4760a1c065f08119bb75a28d4688fec42142cdafde1048cc2a3eee4860c07c62c3afe501ab0d1aa65a2a06555c3f98c24f1d13"}, &(0x7f0000000100)=0x63) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x1}, &(0x7f0000000180)=0x8) 05:58:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0x5450, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x100007fffffff, 0x200) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000000)={0x6, "45f73be766370a4761ae88ead74218e4e372a64f0846a9f87969b483962a2dd3", 0x0, 0xffff, 0x2, 0xe, 0x2}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x8000000000000000, 0x0, @discrete={0x0, 0xfff}}) 05:58:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x6000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x440000, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x10001, {0x2, 0x9, @multicast1}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @loopback}, 0x24, 0xfffffffffffffffa, 0x3, 0x0, 0x7, 0x0, 0x8, 0x2, 0x4}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @discrete={0x9, 0x6024}}) 05:58:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0205647, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:22 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x20) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x100000000, 0x0, 0x4, 0x20100010, {r1, r2/1000+30000}, {0x5, 0x8, 0x31b8e5f2, 0x9d, 0x3fe00, 0x26, "30c16b12"}, 0x2, 0x4, @offset=0x1, 0x4}) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x80, 0x40200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r4}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000001c0)={0x100000000000000, 0x1f, 0x401}) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r6 = getpgid(0xffffffffffffffff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r3, &(0x7f0000000240)={r0, r3, 0x5}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x4e22}}, 0xffffffff, 0x80000000, 0xf723, 0x7, 0x9}, &(0x7f0000000300)=0x98) 05:58:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0x40049409, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0xffffffffffffffff, 0x4f565559, 0x40000000000069, 0x3, 0x2, @stepwise={{0x4, 0x80}, {0x100000000, 0x9}, {0x3f, 0x4}}}) 05:58:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(r1, &(0x7f0000000180), 0x13b5, 0x4008000400000) 05:58:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@generic, &(0x7f0000000000)=0x80) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000080)=0x7f, 0x4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0xaf, @loopback, 0x4e23, 0x0, 'dh\x00', 0x2, 0x7fff, 0x70}, {@rand_addr=0xff, 0x4e24, 0x0, 0x7f, 0x10000, 0x2}}, 0x44) 05:58:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x400, 0x100) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x6, 0x858, [0x20000380, 0x0, 0x0, 0x20000720, 0x20000860], 0x0, &(0x7f0000000240), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x19, 0x28, 0x888e, 'ipddp0\x00', 'team0\x00', 'teql0\x00', 'sit0\x00', @dev={[], 0x12}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x118, 0x118, 0x150, [@ip6={'ip6\x00', 0x50, {{@ipv4={[], [], @multicast1}, @empty, [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 0x5, 0x6f, 0x45, 0x8, 0x4e22, 0x4e24, 0x4e20, 0x4e23}}}, @state={'state\x00', 0x8, {{0x1000}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@random="60eeebafe2be", 0xfffffffffffffffd}}}}, {{{0x1d, 0x8, 0x86dd, 'nr0\x00', 'ip6gretap0\x00', 'teql0\x00', 'bcsh0\x00', @broadcast, [0x0, 0x0, 0x0, 0xff], @random="2c4bad7aaa4c", [0x0, 0x0, 0xff, 0x0, 0xff], 0xb8, 0x1e8, 0x220, [@ip={'ip\x00', 0x20, {{@multicast2, @dev={0xac, 0x14, 0x14, 0x12}, 0xff000000, 0xffffffff, 0x7, 0x2f, 0x4, 0x4, 0x4e23, 0x4e23, 0x4e20, 0x4e20}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x2, 'system_u:object_r:urandom_device_t:s0\x00'}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x18}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x9, 0xdada, 'veth1_to_team\x00', 'bond0\x00', 'erspan0\x00', 'team_slave_0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xa0, 0xd8, 0x110, [@cpu={'cpu\x00', 0x8, {{0x8}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x10}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x22, 0x805, 'erspan0\x00', 'syz_tun\x00', 'ip6gretap0\x00', 'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x17}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev={[], 0xa}, 0xfffffffffffffffd}}}}, {{{0x3, 0x2, 0x430d, 'bridge0\x00', 'irlan0\x00', 'irlan0\x00', 'veth1_to_bridge\x00', @dev={[], 0x19}, [0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xd8, 0x110}, [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x19}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x1, [{{{0x11, 0x21, 0x9b3f, 'ip6tnl0\x00', 'erspan0\x00', 'team_slave_1\x00', 'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x128, 0x128, 0x160, [@ip6={'ip6\x00', 0x50, {{@loopback, @empty, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0xffffff00, 0xff], 0xffffffff, 0x2b, 0x42, 0x4, 0x4e22, 0x4e21, 0x4e22, 0x4e22}}}, @devgroup={'devgroup\x00', 0x18, {{0x4, 0x1f, 0x3ff, 0x40, 0x986e}}}]}}, @snat={'snat\x00', 0x10, {{@local}}}}]}]}, 0x8d0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4002, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="242955ca260dc4a1e5e5bca85ddd70fcc5c05336716ff79750bfa914febb54d0"}, 0x8, 0xffff, 0x5}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000c40)={r4, 0x8001, 0x10}, &(0x7f0000000c80)=0xc) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000080)=0x4000) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000001c0)={0x8001005, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0205649, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:22 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) fstatfs(r0, &(0x7f0000000100)=""/153) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 05:58:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x5000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) dup2(r0, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0585611, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x400, 0x8000, 0x395854e2, 0x2, 0x9}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x200800000000005, 0x2000044495658, 0x4, 0xfffffffffffffffe, 0x0, @discrete={0x0, 0x5}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000001c0)) 05:58:23 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x4, 0x3436324d, 0x3, 0x2, 0x2, @stepwise={{0xbc, 0x3}, {}, {0x1ff, 0x7}}}) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0x4) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x200002) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r2 = getpid() write$vnet(r0, &(0x7f0000000380)={0x1, {&(0x7f0000000280)=""/84, 0x54, &(0x7f0000000300)=""/109, 0x3, 0x3}}, 0x68) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x8, 0x4, 0x56e, 0x56, 'syz1\x00', 0xff}, 0x2, 0x10, 0x0, r2, 0x2, 0x1000, 'syz0\x00', &(0x7f0000000100)=['/proc/self/net/pfkey\x00', '/proc/self/net/pfkey\x00'], 0x2a, [], [0x1, 0x80000000, 0x7fff, 0x9]}) 05:58:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) socketpair(0x96d4ffdbaefd69cc, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x2000000) setsockopt$inet_group_source_req(r1, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000600)=[0x0, 0xee01, 0xee01]) getgroups(0x2, &(0x7f0000000640)=[0xee01, 0xee01]) setgroups(0x8, &(0x7f0000000680)=[r6, r7, r8, r9, r10, r11, r12, r13]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r14 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'irlan0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0x5421, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) accept$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) 05:58:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffff7fff, 0x0) r1 = getpgrp(0xffffffffffffffff) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f0000000080)={&(0x7f0000000000)}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0x18) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x1, @stepwise}) 05:58:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc058565d, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:23 executing program 5: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80000001, 0x4000) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x1, 0x4f565559, 0x1000000000007, 0x80000000, 0x0, @stepwise={{0xff, 0x217700}, {0xfffffffffffffff8, 0x101}, {0x1, 0x8}}}) 05:58:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x600000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000240)=0xfffffffffffffc94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)) write(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:23 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x9e0000, 0x699, 0x1, [], &(0x7f0000000100)={0x9b0907, 0xcf000000, [], @p_u32=&(0x7f0000000080)=0x2}}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) poll(&(0x7f0000000180)=[{r0, 0x2}, {r0, 0x408}, {r1, 0x2084}, {r0, 0x4040}, {r0, 0x8020}, {r0, 0x1000}], 0x6, 0x8001) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0xfffffffffffffffe, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0045878, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x40000000, @mcast2, 0x4000002000}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x99d, 0xffffffffffffaa92, 0x3, 0x8b6, 0x1f, 0x35682d47, 0x8051, 0x9, 0xffffffffffffffff, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x800000000001, 0x38414261, 0x80000000, 0x0, 0xfffffffffffffffe, @discrete={0x8, 0xfffffffffffffffa}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x10000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001680)=0xe8) accept4$packet(r0, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001700)=0x14, 0x80000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001740)={0x0, @rand_addr, @dev}, &(0x7f0000001780)=0xc) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000017c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000018c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'sit0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001980)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a00)={0x204, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x8010}, 0x81) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 05:58:23 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) 05:58:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0x5451, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x300, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0xbc3d, 0xf, 0x919c9e79a6595ce, "c66a705d25e069a23355f025ec12722d6d6a5ccaaf26803880de4cf53b4eff86", 0x72337753}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x200, 0x8, 0x3, [], &(0x7f0000000000)=0x8}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:24 executing program 3: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x2}, 0x28, 0x3) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getsockopt(r2, 0x4, 0x3f, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) pipe2(&(0x7f0000000040), 0x80000) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)) write(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 05:58:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0045878, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:24 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) getpeername(r0, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x10000200003) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000040)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 05:58:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0xbc, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100)=""/188}, &(0x7f0000000240)=0x78) write$FUSE_POLL(r1, &(0x7f0000000280)={0x18, 0xfffffffffffffffe, 0x1, {0xffffffff}}, 0x18) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000300)={0x9, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xf6, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000002}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0285628, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) keyctl$session_to_parent(0x12) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3ff, 0x400) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x162) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x600042, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x870, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x8000001d, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:24 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) getegid() ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000200)={0x1, 0x2, @stop_pts=0x10000}) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x80000000, 0xbd2, 0x1, 0x8, 0x0, 0x6, 0x10, 0x2, 0x6, 0x8, 0x6, 0x7, 0x1, 0xeb6, 0x400, 0x3, 0x40, 0xb2fd, 0x9, 0x2, 0x1000000000, 0x6, 0xf5, 0x7, 0x4, 0x2, 0x6, 0x5e3, 0x7, 0x0, 0x6, 0x80000001, 0xfffffffffffff00d, 0x8, 0x4, 0x1be1a741, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x4000, 0x2, 0x10001, 0xf, 0x3, 0x7fff, 0x7f}, 0xffffffffffffffff, 0x9, r0, 0x3) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) 05:58:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) pread64(r0, &(0x7f0000000100)=""/76, 0x4c, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x400, 0x4}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000180)=""/113, &(0x7f0000000200)=0x71) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000003c0)) listen(r0, 0x10000200003) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000280)={{0x1, 0x6}, 'port0\x00', 0x81, 0x0, 0x80, 0x101, 0x1f, 0x1, 0x1, 0x0, 0x4, 0x3}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000400)='/dev/snd/controlC#\x00', 0x5, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000000292785f4f2b98f646d9b43c8b9751a7fd28ddd8e4b5473d9025ca658fbcfa68cf58b47fa92efc99d54908bd56ca3a0e4d5778a3940c4d82ed2bc071cf09e221d72f4fc3fec9b941817c8630a8b0021df8b959791be8cc492f242ab67868336be03e88385d2f9620d6cdc49acae0f138963e6fcb8c0cac3ffed6655fb52c18f8c5fbf25122e147e508c6e8f416a384507fa254e850cc4e9eefe6d4b86b43d3303979f4d21e2637fb2a61260c422610c234cf12bdf04200caba44a217884faa6659b8c1282d1048a1b363bced575166f429f70dad82d8e16133cc906d6b1690b88e69a7bb1b6dc4155ebe021809075ae848c896fb2b2235ab58e21fdb5c9a2282f426fdc946aa57a461e3d4af2e6d4c8064a3bb31a3c3d868055f2"], &(0x7f0000000080)=0x24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e23, 0x6, @empty, 0x3}}, 0x3, 0x48000000, 0x3ff, 0x380000000000000, 0x40}, 0x98) 05:58:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x10000000000000, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000140)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x4, @stepwise}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x48200, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/62) 05:58:24 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000015, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="089900000000000000000000000000000000000000000000009439492caa81b29d87b817f0dfec9c5e0858326556416ec36436e50c42b449192cf61425c93c48e8f5dc3ea91194250881994da6bd1ade38adae1317229b54cb11f0181048c8af00093bc679131772e7f296976d615d1ca3375c644e7b8063ef2b0f790e5ce36c66412eddf375b65309cd5838f3ce2879ccd013fcbef8d37d8b1a524bd07ec69b01f8ff4b6afafb566e3314ea4629ee30e4a1a3459e9f86c4a31ea6aa0330ad1313921ab6c96d7ee0890b8ab699ed4de078d8590094b7b2b0058298e5427171089873edbc9a24de4e0e4eeca87dbb537d5a"], &(0x7f0000000000)='GPL\x00', 0x80, 0x38f, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000280)={0x5, "b84904a4a0ca9a86cb2ff72a2c986e9a16f6fe0e5eeebd0fc034f03ff8a05e99", 0x2, 0x1}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000200)={0x0, 0x4f565558, 0x69, 0x1, 0x0, @discrete={0x0, 0x2}}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000080)={0xfffffffffffffff7, [0x1f, 0xffffffff, 0x0, 0x9f0, 0x7, 0x1, 0x5, 0x5, 0xa90d, 0x1970, 0x8000, 0x9, 0x4, 0x7, 0xffffffffffffffff, 0x3, 0x1000, 0x7, 0x80000000, 0x8, 0x1, 0x8, 0x0, 0x0, 0x6, 0x7fffffff, 0x4, 0x53f9, 0x4, 0x4, 0x3, 0x7, 0x81, 0x800, 0x9, 0x6, 0x3, 0x2, 0x80000000, 0x10000, 0x3, 0x2, 0x80000001, 0x30, 0x2, 0x80, 0x6, 0x81]}) socketpair(0x1d, 0x80f, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x76, 0x3, {0x0, 0x2, 0xff, 0x1, 0xfc000000000000}}) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000140)={0x9}) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000240)=0x80000001) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x0) 05:58:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x100000000000000, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:25 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1000, 0x422, 0xe6, 0x80000000, 0x0, 0x2, 0x800, 0x7, 0x145, 0x80, 0x7, 0x6018, 0xa05, 0x4, 0x8, 0x3, 0x8, 0x3, 0x3, 0xfff, 0xffff, 0x0, 0xffffffff, 0x7, 0x6000000, 0x81, 0x0, 0xfffffffffffffffb, 0x6, 0x7, 0x8c, 0x5, 0x7ff, 0x2, 0x8000, 0x200, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000000), 0x8}, 0x1, 0xfffffffffffffffd, 0x5, 0x3, 0x5, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffff9c, 0xb) pwrite64(r0, &(0x7f0000000480)="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", 0x13a, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6287, 0x200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x7, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x200000000000000, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:25 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x20000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0xd860, 0xf}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0x100}, &(0x7f0000000180)=0x8) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x67, 0x10000, 0x0, @discrete={0x1, 0x401}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xda09, 0x200, 0xdd5d, 0x3ff, r1}, &(0x7f0000000200)=0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 05:58:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 05:58:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1f) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() ptrace$peek(0x2, r3, &(0x7f0000000040)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:25 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x9, {0x4, 0x6}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xa30000, 0x9, 0x3f, [], &(0x7f0000000100)={0x9c092f, 0x81, [], @string=&(0x7f0000000080)=0x80000001}}) 05:58:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:58:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x8, {0xff, 0x6, 0x1, 0x7fffffff}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x101080) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000100)={0x8, [0xffffffff80000001, 0x8, 0x4, 0x4, 0x42, 0xe3f3, 0x2, 0x2]}) 05:58:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$setstatus(r0, 0x4, 0x0) sched_setparam(r2, &(0x7f00000000c0)=0x8000) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="8c560a8447002affe0064e230f00000000a2bc5603ca10070f7f89000000200000000101fe0000000309ff5bffff00c7e5ed5e000000000000000000000000000000000000000000", 0x48}], 0x10000043) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x70080000, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:25 executing program 5: syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x1, 0x806) r0 = socket$netlink(0x10, 0x3, 0x17) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@get={0x118, 0x13, 0x408, 0x70bd2c, 0x25dfdbfc, {{'morus1280-generic\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x72e7}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 05:58:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) 05:58:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xc0000001, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@remote, r2}, 0x14) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x80000000000008}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x7008, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x6, @output={0x1000, 0x1, {0x10000, 0x5}, 0x4, 0xffffffffffffff18}}) 05:58:25 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/4) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x3032344d, 0x0, 0x2000000000000002, 0x20, @stepwise}) 05:58:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) 05:58:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x2, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04012bbd7000fedbdf2511000000240001000800010000000000080001000a0000000800010002000000080001000a00000004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x802, 0x0) 05:58:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x1ff, 0x1, [], {0x0, @reserved}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:25 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x4000000004) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x7008000000000000, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x5, 0x90) 05:58:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x80000007, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, 0x0, r4) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) 05:58:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x11, 0x1) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) fcntl$getownex(r3, 0x10, &(0x7f00000001c0)={0x0, 0x0}) capset(&(0x7f0000000200)={0x19980330, r4}, &(0x7f0000000240)={0xf110, 0x3, 0xff, 0xfff, 0x7f, 0x9}) 05:58:26 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) r5 = getpgrp(0x0) r6 = geteuid() r7 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001f80)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000002080)=0xe8) r9 = getpgrp(0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$netlink(r1, &(0x7f00000028c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x61f26d8bd84eecf9}, 0xc, &(0x7f00000027c0)=[{&(0x7f0000000100)={0x1c, 0x28, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x4, 0x52}, @typed={0x8, 0x51, @u32=0x2}]}, 0x1c}, {&(0x7f0000000500)={0x464, 0x24, 0x30, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x1e, @uid=r2}, @nested={0x14, 0x72, [@typed={0x8, 0x94, @u32=0x9}, @typed={0x8, 0xa, @uid=r3}]}, @generic="bc99eaa76294280e65865876f84edf84835a14d5d7edf5161fa6674cb3490771fe613ec560db6ed27af0f5ddc5d0", @generic="1740b3468bd22a2f217b6dc8ac4166745a9bc9784f380442535fa2a3ff9a72f1f7621862039a3ebd86ccff7c1b2dc2f74aaff9c53ca16843a218eabd981a3fc804bc791efe2edbe823c7879a068503516df8cf9781880dc676093dfe6a730207aa2c7cb6b0dd6ba47263ff531a16bc2be68d7f865bf4122151987f2de4bba7fd816bf2fbd48a03abbc3318578deb2a7ea4f9421ce10c9d99ef620c0a927204", @nested={0x4, 0x12}, @nested={0xd8, 0x8e, [@generic="1c0af2ca1ed0ac8219e83d32f26e67432b034a6316ded0979f1630629a6c5afbe758f2ed8211a2d0c64086576d1f2d57a8cb290763c0f5fd1be7e85dd79abc7365d88c3dad9625e1d5b1630c40237ed67a85b3437acda45dba4193149e37261a5476923e81af42327018efd160873fce165bfed1a70dfa91e350606071e05dfa039cc225b23b9b8114975b148cb75bcdf13d400451535c25a82a17a04857bf168cefcfdba7cc293d3b83121e6f19e302a274e16cc45c7a2b363e47959b079450f26e3a4cefc6abb6d728e40e81c86d65e8"]}, @nested={0x114, 0x64, [@generic="84be6a2d66dbb4a7ee15b9a9a4e94e8957a4", @typed={0xc, 0x4d, @u64=0x3}, @typed={0x38, 0x8a, @binary="e424396d1278b7bb7fcb515fb2d47c3f556207947d98a6dedbc5eb23dedb1e00ad8575bc409a42d8884449e73a5eb3075e"}, @generic="4a403d7d053864347eed", @typed={0x8, 0x39, @fd=r0}, @generic="b1d932e9b1f19d612d31ecec549b6b14277d0b02e56b6bbf87a13a088dd86df3aba35b95b44971ef09039734f4b04d339db375c9f6ec7e143e6435375fd57419a9040fd8fb420c7f75d6217468252e48e2321dca217192c4bf6bcbe6d32ae946ad6a3da4530e90b2961fdb97be52e744f6d38310c4f7ed1c2da060f89fa1d20e783b39c90bf46dad21d7ded4bd6ad5a98a07fa14fb462fc80c7a17931c405fa78e", @typed={0x4, 0x57}]}, @typed={0x8, 0x44, @u32=0x200}, @typed={0x8, 0x3e, @fd=r0}, @nested={0x168, 0x44, [@generic="fafd5f88ff70947b69de70a856f732abebd8041ab682b624e426de39494769467a6309636d27a5efa080b9aa8fa85f3d976978605f77402d306dcc937cf70395330b869e60235b5397c76f5e8b94ead27d0a81f0ea3ca66388c0c5e599256c3885", @generic="6170b6624c59185da51736bff30866fc9b3cd0f3d23a4ca6e7b2a5fddc17bee3821644f33fa0b3fc25aceb6f7e2cd458d40a020ded7f5fd9ebebece7867ea8a2687f63d68d684243c77b910a55da3d7d8e11405599a46fd09ded75648c080509356495308b5b12e98f584d7021ee5ae0acc26f5232", @generic="699dbb9ef868757845118e64d3b5d94cd864352fa047befb8e70033ba75ded8f0d89b0b3111fc8342d7b5a6b789780fdfa5a5ef26102bafefd1c82193ad30bd7830a9f21c0a581a903050c0ec8dabd7af053e5e6f3c80b895413b4b89feeb7a35fd0d94361d0d68bd91632c0f982cc7f68f93759f83ba0", @typed={0xc, 0x28, @u64=0x3909}, @typed={0x8, 0x4a, @uid=r4}]}]}, 0x464}, {&(0x7f0000000980)={0x1010, 0x36, 0x400, 0x70bd2a, 0x25dfdbff, "", [@generic="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"]}, 0x1010}, {&(0x7f00000019c0)={0x380, 0x12, 0x10, 0x70bd28, 0x25dfdbfc, "", [@typed={0x10, 0x70, @str='/dev/video#\x00'}, @typed={0x14, 0x3d, @ipv6=@mcast2}, @generic="f1cf62ac6969a2550ef030e552cfb78397eeb962e4a50e93ab478d0abb964658cab471531a0bef7d425d3381db3f9813758fbdb050b666e218d5844f01a45752547ac4f8bedd5f5d63ce8a0cc112950303e0f98688b35f93fbdd4f84f7eed3b5a4ec9600bcd5daa4869ef817242aeab693e4b12f70ff32a724eed3350f39f365d9462d3de8e9f158192ad298b02ecf611d9bf1f5a35f953bec1048832237f9d8d64793e395b04a341886fb2188251fc4ec564a3c9534f934a4003c39c1e0ad4541ccf6c5dd83aa06d9d49cd4d967fafed811eaa1b672a0b8c16e6fc650fc1310e94eff198ae7a0921f3da3ebe69a1d24c9ad7bfd1e", @nested={0x250, 0x6d, [@generic="8cf659368a77e8159e8b4ef2930f83b5c204576d22fb63dbcd9a001a17de118291695a66a97a54f8be281724158f75053862380d63588b1d2943b64c11189d8dc003ddff562b2dfc24cd8f1f1ab61827089c84e7910a703a118f8f04901b", @generic="d9fa379fb3e70d4d40df8499fcc62fcb90d5fca859737917a53f9ec9f5f2e9efa403f541c1d13dd73c33425d1e06590d911fb30a20e2d1d6626c736ce0197cf1c3b85b74acde34bd55033298ace3e97fcabbd40a6bf356109ef0679889db6ab621e9e229729d030049ca71b1837d1c886dbd8aff046524fee6b7ca21899eedda05b5cd95ea906f7fd0cf7e72b2be20d6b708d557a2c8b5e687f71ff282207df975b2f9aaa0ece77f0575a9b254aa135b391144e7114742a2c16665d3fa9f14e9e2d8e9cc16bffe007741adcdb69153053d68056ed6210b15885a07c6b0d4385ba804c25438b328b4e87d1a64ac328e230954580824a8fb", @generic="5bbebcac0af76b49ee50335f7e2a4175e2d3479ffe76b13cdeddae469355db4a9a1bdf5490e43ce4ef0898d7b6d64b271bde61086878ac5454aba7a4e9135c8b34e7b4715bd4d18ade90697e459f616e2d8602e31c", @typed={0xc, 0x50, @u64=0x1}, @typed={0x8, 0x7c, @ipv4=@rand_addr=0xfffffffffffff801}, @generic="6e4f67515ae15c1ac2f2d47fd9aaa4e95663b5aba573f15d7f4ed17e68f9f1ebbc89cbfa592d2a267d80c854f2b66c8a9568699a9e86a1d7e03be1a97f441246", @generic="b1482ea3d590e7bc3f368a609aece052feeec7911821173f963fcdcef87825d4838e5c6ccf816d703e92aae0c67ba10557f2ec0e694048b97441a2e4d49ee5d6a523ae", @typed={0x8, 0x43, @ipv4=@rand_addr=0xe376}]}, @typed={0x4, 0x8d}]}, 0x380}, {&(0x7f0000001d40)={0x238, 0x37, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@generic="00fa8d9839347beec86c56acab7fd9a4c9b7a27ba6eb00db7af758b81be900a38fd52e65ff49ed8adbf65723e9f5f6e18c1af19173f7e79a2c18ab1273d11e5e281f34a77e0a856c2f12535c921bb39af2fe2617dcf8b1fdf6e88368b5c656c234e1ba45eb48126ddd7f41266f050c5ee3d283faec9e9a55095f233ea50a79f7e77e2c494109207dfc2dbd26dbbbcca7d6dab22df0ba077c22599dddfef32db61608ce09b8c96cbcd27ddba21979eddc4e523cefb044", @typed={0x8, 0x80, @pid=r5}, @typed={0x4, 0x1}, @generic="6bb167f895c127f01833dd07ecd670e30a565a51e738a483a9b210a55bd82a435138cf6fd0d685bc7a3dbc8e1674c610fec94035f7de9e80fbbc6ae977a8fce5670912d2c0aeb4cf27d4c6740cfe3962980bd2e54146084f487fced04a113947e9eb018c323500973c893668658bad534c777e69fc9b1a", @generic="3573465085df12ede5db66a7083abf9cad4e8a5afe90690cd1c87361f91e449c629550e8cbed2c2fcac8c983364344e670f0ad7e1b5700212b1f299be98a1af3ecf03441dcc4498fcc647e180737d58e9aaa598cd794a35ee0d8044350ef50ad05e8863603a9b428459e7735cf439f6a5c16a62fa61ccffd6907cc4862506b95ff3072c01c7909cf3611c5e0fff3992b9a3120e18de8125791b9f78489b8093a4a1c9e2ca43fdb837c2ed4759510522a2081e3ed830b0acddad5c6c2c39425bb8675025716abe59caf17db1a8d6976d7f1c3be9a", @typed={0x4, 0x51}, @nested={0xc, 0x77, [@typed={0x8, 0x8c, @uid=r6}]}, @typed={0x8, 0x5, @u32=0x400}]}, 0x238}, {&(0x7f00000020c0)={0x1c4, 0x36, 0x932, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xe0, 0x75, [@generic="d1016182207602f22c3ad7329d6d07e942122197b24c613078a11fc01133bad1c78dc0c1", @generic="929a476341ba0aa6b2848ec02e727f151691a887c5e73adba2833ce01192cd4072d85c8d467152db4853142b7ab3c93df606fdf437a09bcb9b6f064c5f119b946435b12f97f578b76e1f42192656f610fbae0058d0edee82eda07d5c709432eb0ca7ff84b0755778577483c64d691ad90db2b047e72bde281bebb89bc74612d44b571e2351399096d8", @typed={0x14, 0x51, @ipv6=@mcast1}, @typed={0x8, 0x85, @pid=r7}, @typed={0x8, 0x20, @uid=r8}, @typed={0x8, 0x1b, @ipv4=@remote}]}, @typed={0x8, 0xf, @fd=r0}, @typed={0x14, 0x48, @ipv6=@remote}, @typed={0xb8, 0x1c, @binary="b65b3966ed2f74c27a719537734ca916dc1fb659711d925f4f155308c7c94cf3577f16171bc0c7ed956462bac53bd94e43151adfa8f960ac45e15a710afb2a7ec21373ea5e2deacd619df886282ffc6dcf3443486d567812ccc36b7c0c3fd8715a351960d937a53ff2450eb672e8e5c9647308c9502900aa39414c788da0318dec49b7238b16b101e976afcccd13c6c20e57a5f5866ae324a843c47528e61f7854b61dd97c542e252cdc1116a8dbf299d1230414"}]}, 0x1c4}, {&(0x7f00000022c0)={0x3c8, 0x28, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x58, 0x33, @binary="b691ea7c07bb3bb75cf051e1d4a356129971c0ba68e1ecbd10dc0f57b97f65e5256187f2a2463d09128bd1947353a735f84c3872e51c89f6fbfea12ca36dad9be40c497b57fb6bc0abe2c2d9f61e613ba8"}, @nested={0x21c, 0x38, [@typed={0x8, 0x33, @ipv4=@multicast2}, @generic="22b4a6152edab2d8b36c03452483284e50c375f60bd430ddfa9c752a239636e5afe155dbfbbab8a88a6ee22c8d40faaa39e7f5db975dc038d93aa84f707d8f984ef334363bcf3f173ce1c9125fc77cd4102929c9b6595623da4603f53e20ef0e1622831fa94fa8d92ba537fc16c4b2bae75b027dea18e9935add0ba80b209261b9133c2a6a6ac2bd63f8a72d1a6571602381ec619314416eccefb767", @generic="166e47bbbe3ccc07e66e01fe78165b30d72770f7b898f4a8eead31bdc3f94affbad43358eb922f2d52943d26bbe9237bb6ad25055d28af96ab88bf1cf56247ee8b84c75715cf03587527ab45879a4137669852f14ecb3ee22942e9c33b17fc3d60d07a0d1ee4da40ca739ade016d27a3af2dc671494ac5f5575248c55a316e37deaa892a62257f97aa4e90d3e877ccac1205653bc7f88d1a08bede76a9f5da3451294fff119b5e4b559c3cf46e8a4acbd2ae68d2dc309b7b85f89652d30d89463fe7841388f6a127b8c1d3cc2c243a8dbe43596bf0762162749c9622433bef360cef01bb", @generic="57dcd869947e90f1eaf6d5c2dc8c546b15fbffb07134ce4cf35eaadba5787744152be57cbb857a8cfff26d133d42291ff1b02a3277275f35d3848d4549740cc619d4cbbf47659eece4d0ddd847cc9d54e425a1f16a9daa5da67f469d24e7b38ad486de3e0f02612041b280f59a0943a9bfa92cb895c28f567deec288a4d3226e94f4c3b4a97da4f9e8fb71ad8964d764"]}, @typed={0xbc, 0x70, @binary="9705bd9d6d2a509f8038404df72edaa82b5706922d328e5bd94f4072386cbde72714bd17ef55b10fb990989f05b0fdf83047735b911cee2c1f3d7ec0e6ee86557e01b6e3742ff1fcdc765735d896035d7a1e5d277e215436fdf0c25b203ca0993567ab2fcaece27fc2af8335996ff4e5dc523974c8311681b805fb1f8a38e909f8185c938251ddc8c2d0fc4b210387d3a45bd2ce68f071e971f9a5699a1615f033e692d1f91c56612f8eec12efbbdf90c2348df65a74b2d7"}, @generic="314d9ee41903b2366012481e481e84021cbdca0033ffb7fbf5f9a17595a5d53f4636b0f93cb3d6d64b902dab2a31ab1dbf2da45eb9403cc7cb5d42258078a3c8a3b3bc2ec9981b9405b6d463168f0bf41e6b11d2c715c0b45349f5e96c95e37f2fd97bf531befa5b5e0854ddd4e2749077d8d0bfaf36f2539f40313e744bd18cd600d52a0b17"]}, 0x3c8}, {&(0x7f00000026c0)={0xe0, 0x34, 0x300, 0x70bd29, 0x3, "", [@typed={0x14, 0x15, @str='ppp1-eth0[\\[C\x00'}, @generic="bce529b4d7187be82f9ccf5a428a09889b5c9bfdf98729c33e1595333327dd6f81e1a908f44596b278a56a7d221edfbd9b6c76c4e4d233dd4755f84470282260c0a5571d4c5c11f88f7dedd1f57a68a5a5ac77fc1121df1d311a1f613f39a4c3367edcf6c7fbba60235290e1f143baeaa72e4d03e1a028026ce6168fac7490947596356f792b57c5cdb33a689b9eb2aff7afc94b89da2733f96ff704c1e15a70", @generic="a41a", @generic="739671ca0d659a5863835961", @generic="e6e7f1", @typed={0x8, 0x52, @pid=r9}]}, 0xe0}], 0x8, &(0x7f0000002840)=[@rights={0x20, 0x1, 0x1, [r0, r0, r10, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x10}], 0x80, 0x8085}, 0x4000) 05:58:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x100000, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x628a, 0x3ff) pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)}, {&(0x7f0000001140)="72d59b6839db998aa1784d95028a5f452ec1", 0x12}, {&(0x7f0000001180)="cf49cd42686170ed20ca41e3529559e3b4a5d98120a6f950a9c8cda442e6bbeeb9376f5f1b23c8941a2544b53ef46e8d7806491cac3aafce63565b51da9e4c2db42c73a42dee687c267a1a8ce55de9", 0x4f}, {&(0x7f0000001200)="d8ce1bdfe95fb58063cb2219e18db965314b328c16cfeddbe0b7f7234307e506befe9477e343331517fec026768f72fe7a136aefcf93a8e6950a4a5bf1b4dc75bed88342121fa41a67c1a9e50b0e134c43d75edb0db85efdea1c584b642a89e684787016fcd07b33c0754d4f6c815985b0c7e74163f5393b09c10a1257aa59ba68fd8b548599a32448b126442e93e7818fbb87d62c862b3fbbfe2f5d6de3e384c3", 0xa1}, {&(0x7f00000012c0)="da780ee75d137d20c6e588ce90a9a46e4663c6bbf5fb3def94ac975d37710f4c965929da2e4bb518cea39d199b8c6b684ddd215c97c03b5c5ad2b15bf70ab4d484802fc2c985d2ef2ced2dbe2437cae6ccba33451b81006011fe83e79d1f862831412c2299cf4f3cf8d75ac8fa39ac8f2a911eceb9d6df4fc8e751ad45999a67ffe5dd341cd0776a3c1179aa08e5d27a77b7de02c6a5d3e4d72b671cd85460270f4ca65e4354b8edf7270c4ce2e0f5387dcc9ff73d3fd3f01378449461abc78067d6", 0xc2}, {&(0x7f00000013c0)="d955844011bcacec9c4df90c0038bdbee91bd33dd4b7cf81e0d05c6f13a11c1f005a5ae9f8cedf8e6a5278608e020f37d419a8ead4f7a99b5ccba3083de8d487712918ccbdb175d0940518ddbbcfbea1765a1569ec3a054d857c1da4edc9baf96124ed951f2435b3c3a8e289a7b5fd63", 0x70}], 0x7, 0x0) socketpair(0xb, 0x3, 0xfff, &(0x7f0000001100)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x0, 0x5fa4, 0x8}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x1000000, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r2, 0x0, r3) 05:58:26 executing program 2: r0 = socket$inet6(0xa, 0x20a, 0x80) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:26 executing program 5: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000100)={0x1, "c12fd8f0536fc876a4e98cd9d2e028157428299f169113c599eea6ea8d15e8b4", 0x3, 0x7d, 0x4, 0x80, 0x2}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) readahead(0xffffffffffffffff, 0xff, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x7fff, 0x54}) 05:58:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000005280)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000180)=0xe8) recvfrom(r0, &(0x7f0000000040)=""/41, 0x29, 0x102, &(0x7f00000001c0)=@hci={0x1f, r1, 0x3}, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000005340)={0x0, 0x80, &(0x7f00000052c0)=[@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0x17}, 0x6}, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x400}, @in6={0xa, 0x4e23, 0xfffffffffffffffa, @mcast2, 0x100000000000000}, @in={0x2, 0x4e24, @rand_addr=0xfffffffffffffeff}, @in6={0xa, 0x4e24, 0xfff, @local, 0x7}]}, &(0x7f0000005380)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000053c0)={r2, 0x2}, 0x8) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) 05:58:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x1000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x2000000, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:26 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x210200, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000080)) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:26 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) 05:58:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x20000000011) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0x40045542, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x10, @bt={0x0, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x280000, 0x0) fsync(r3) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r4, 0x5}, 0x8) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x0, 0xfffffffffffffffa, 0x1f}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) 05:58:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0xca1f6dfcd3481561, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x81, 0x6}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2, 0x6, 0x2}) 05:58:26 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x3, 0x0, 0x0, @stepwise}) 05:58:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x870, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x8000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000001c0)={0x9, 0x7fffffff, {0x0, 0x5c, 0x1, {0x4, 0x401}, {0x401, 0x4}, @ramp={0x400, 0xff2c, {0x4, 0xdb, 0xffffffffcef5c8a4, 0x3}}}, {0x57, 0x4, 0x579, {0x8000, 0x101}, {0x10000, 0x7}, @period={0x5e, 0x2, 0x5, 0xba17, 0x9, {0x40, 0x0, 0x7fffffff, 0x4}, 0x5, &(0x7f0000000080)=[0x8, 0xe3, 0x200, 0xd2, 0x100000001]}}}) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, 0x0) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac, 0x3ff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$KVM_SMI(r0, 0xaeb7) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000000c0)=0x54) 05:58:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) init_module(&(0x7f0000000000)='/\x00', 0x2, &(0x7f0000000080)='+ppp0\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 05:58:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, 0x0, 0x0, r2) 05:58:27 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x20000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x10000000000000, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:27 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/30, 0x1e) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r2, 0x0, r3) 05:58:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x10786) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x100000000000000, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="c0", 0x1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac66c9c57adb7749a9aad4a96d7fbea4a431c8a8babdb2588255de7d2b31ff2300c1a3ee0f0d0637e3cc39a9eb26a51117285399d66ed869f5858e1da255cce749f32b06e7285cc1b576f0959dd90bc60b4f61c460c6c5ce4d2de34e214a7ae19670fb3f100f058d0659632575fb7ab59d6524e7135d6267d5d502a94050ad166a47a0415cb4cbe0f26483028613f51f4ce763438e2dd6b653b0311be0302b1ec128046f6c8310c68eb4736452c574d5523d6d33623c535e2816ff91714b58ec531b8d3107d2348be37fdc2dae33fe556f607730aec3bc03412d8b7c14", @ANYRES16=r4, @ANYBLOB="020025bd7000fcdbdf250900000008000400000000000c00030008000800010000001400030008000500e0000001080007004e220000080005000500000008000500020000000800040000000000080005003a0c0000080006003b000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) socket(0x0, 0x0, 0x0) 05:58:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r2, 0x0, r3) 05:58:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xa00, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x200000000000000, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:27 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400641, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0xa00, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x55}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) 05:58:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0xff, 0x4f777f7d, 0x1, 0x7, 0x10000000000000, @discrete={0x7, 0x7}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x9, 0x80, 0x0, 0xffffffffffffffc1, 0x3, {0x6, 0x40}}) 05:58:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) getgroups(0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee00, 0xee00]) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) r6 = getgid() fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000640)=0xe8) r12 = getegid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)={0x398, 0x0, 0x8, [{{0x3, 0x1, 0x7, 0x3, 0x9, 0x5e0d, {0x6, 0x3, 0x9, 0x7, 0x8000, 0xfff, 0x4, 0x8fa, 0x370, 0x3, 0x4, r3, r4, 0x100000001, 0x3}}, {0x5, 0xd3be, 0x11, 0x2, '/dev/vga_arbiter\x00'}}, {{0x4, 0x0, 0xde, 0x9, 0x2, 0x9, {0x0, 0x9, 0x9, 0x1, 0x2, 0x8000, 0x7, 0x1, 0x5, 0x1, 0x1f, r5, r6, 0x7}}, {0x5, 0xffffffffffffff80, 0x11, 0x2, '/dev/vga_arbiter\x00'}}, {{0x2, 0x0, 0x4, 0x100, 0x1000, 0x4, {0x5, 0x0, 0x7fff, 0x7fff, 0x2, 0x1f, 0x9, 0x81, 0xfffffffffffffe01, 0xffffffffffffff81, 0xace, r7, r8, 0x1, 0x8}}, {0x2, 0x3, 0x11, 0x0, '/dev/vga_arbiter\x00'}}, {{0x0, 0x0, 0x8000, 0x10000, 0x0, 0x8, {0x3, 0xffff, 0x1, 0x2, 0x80000001, 0x4000000000, 0x4, 0x6, 0x1000, 0x6, 0x9, r9, r10, 0x1000, 0x100000000}}, {0x0, 0x9, 0x29, 0x2, "2d5e8f3a6574683170726f63656d3076626f786e65743073797374656d73797374656d766d6e657431"}}, {{0x4, 0x2, 0x80000001, 0x1, 0x6, 0x3, {0x5, 0x1, 0x401, 0x1, 0x0, 0x0, 0x1, 0xffffffff, 0xffff, 0x8, 0x8000, r11, r12, 0xd5c4, 0x1}}, {0x4, 0x6, 0x11, 0x0, '/dev/vga_arbiter\x00'}}]}, 0x398) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r2, 0x0, r3) 05:58:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200000, 0x0) r3 = eventfd2(0x7, 0x80001) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, &(0x7f0000000080), 0xa, r3, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x2000000, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:27 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x62a7, 0xfffffffffffffffc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xb00, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x93) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84) sendto$inet6(r1, &(0x7f0000000080)="80b95e09bf8a555705714fec1b5bce32f4eac71f0d98ce8e2678e3256f3cd636eb774f1488a2293f40499042bb9be45928", 0x31, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)=0x8, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x1d, 0x3357021256a75dbb) r4 = fcntl$getown(r1, 0x9) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r4}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000040)=0x7) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) capset(&(0x7f00000001c0)={0x19980330, r4}, &(0x7f0000000200)={0xffffffffffffff7f, 0x7, 0x7fff, 0x3ff, 0x5, 0x1}) 05:58:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x100000, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202800, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10241, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x133, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={0x0}) r5 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x82010, r2, 0x17) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x110, 0x0, &(0x7f00000003c0)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x40]}, 0xfff}}, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000240)=[@ptr={0x70742a85, 0x1, &(0x7f0000000200), 0x1, 0x2, 0xc}, @flat={0x73622a85, 0x100, r3, 0x4}], &(0x7f0000000280)=[0x78]}, 0x7}}, @enter_looper, @exit_looper, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, r4, 0x1}, @reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x58, 0x40, &(0x7f0000000300)=[@fda={0x66646185, 0x9, 0x1, 0x14}, @fda={0x66646185, 0x0, 0x3, 0x3a}, @flat={0x73682a85, 0xa, r5, 0x3}], &(0x7f0000000380)=[0x30, 0x28, 0x70, 0x40, 0x78, 0x0, 0x28, 0x18]}, 0x5}}], 0x60, 0x0, &(0x7f0000000500)="cd621e9aeba9a48e0c8828b1ff3ec460ad6dbdedfe742b751d283c98538b53919eda36a3ccc11e44dd33164b88c32039f3e9a284bf86dcd1503b867f2cdc003e95e1fef652ce122672623d4589389e8344cbfb0a8b32050a95e9ce5429a3d153"}) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000100)=""/76) 05:58:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000001c0)=0x3, 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x20000, 0x0) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r3 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmdt(r3) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000180)) 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x10, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x86287, 0x1) r1 = getuid() ioprio_get$uid(0x3, r1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001005, 0x5067, 0x2}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 05:58:28 executing program 3: r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xdc, 0x6, &(0x7f0000000540)=[{&(0x7f0000000180)="12523f204897412f4bbdd2051699244c96cf12d3015b0dcf902a9530c3c233b01724cd723dd7e648b63255646845d2f119f974e6a7d74f928e85f252f81a4f272e431f0c05b0612df06eeeba4e215cafaade7fd15b4bb90dbf222da3f630728224ee61fec028726c39bf871f12eb7e90cf09e60aa1d4e13f158a6e13e59bcbe7fa1feeff20f4dc17fc975e841461f624f51d179d7feb1055eaf87e304000e6e189f4f2d8d92a0b70549439f6666290709ff17e1a08b8f37c2918c62b76020883958935316233c5cf1a877a4b92b1b55b8ae4dba98f0e576676a21172f4bdbdc8e2256e791fcb8c0bf9b3a8", 0xeb, 0x6}, {&(0x7f0000000280)="7d391020ec9bb0e8892933ba6d43889e1ec76137e5d354154590d8b34c04f07f9721ae366549bac1454c15c97d3990ae71227df50547fa83ebd47b748b5b8472daf1101bf99600439a60d601e43376f677652a12f32c5295c182a9b3b7071f1d698a4ee66e6c0e56fbbc971352fe8268f14982bcb8e20419903e17bf28e57a7fca35d83e1af5af8eb41b259e4c2fc736ef84061c1226052cc9cd5fd97d513fef64eadd1f6149d5c539d187ac9ee4", 0xae, 0x5}, {&(0x7f0000000340)="07a6b847f259d252afcf4bbb88af59284fd64aebd073a01205e3b4980accd3c4ac92dd6f2791b38315c0d18a628090c0a72c98c23992950a04f705554cbfad34225bd816a6869c9caeea9a9f1b8a0437040113247af5862817c5832ff318ac5d6feb9ed3abdb62dcdb666a92a44206213551b9fe527566a1354d16285dfd75fe90b9810abca5e10ba4a578fb0273d1ec97da1406e0028cecea46cab75e4a75d92e25e2a37f6fbb161b83d560289485aa8a35de9aad9c629fca5a5e3db2219015b92ae15b1155bb", 0xc7, 0x5233}, {&(0x7f0000000440)="994a54014a70400948f2080c", 0xc, 0x6}, {&(0x7f0000000480)="60f79066293c1d975c55afa1abf87ec2e8ae00ac955efc699b3f4d51b8", 0x1d, 0xb2}, {&(0x7f00000004c0)="8109ebdc588629d45c3d22cc54779d31497cb121c5610f5d69fdbbf230e10fcabe39dfad12da3601f154c35d9a7e35aed0aa575ca7bc3f8a1cd79b88baff210ea2d537d0021e", 0x46, 0x2}], 0x10, &(0x7f0000000600)={[{@acl='acl'}], [{@subj_role={'subj_role', 0x3d, '/dev/video#\x00'}}, {@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_eq={'uid', 0x3d, r0}}, {@dont_hash='dont_hash'}]}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000680)='y\x00', 0x2, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000700)={0x0, 0x3}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000780)={r3, @in={{0x2, 0x4e20, @loopback}}, [0x657, 0x0, 0x40000, 0x7, 0x8, 0x7, 0x2e54, 0x7fffffff, 0x4449, 0x8, 0x7, 0x7, 0x400, 0x5, 0x81]}, &(0x7f0000000880)=0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000006c0)='acl') 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r2, 0x0, r3) 05:58:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r3, 0x2}, {r4, 0x680}], 0x2, 0x7) [ 2367.591926] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 05:58:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x80ffff00000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x2, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x0, r1}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000002, 0x4f56555c, 0x80, 0x7410, 0x0, @stepwise}) 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r2, 0x0, r3) 05:58:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x3) [ 2367.687597] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 05:58:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x1, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x8100) bind(r2, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @empty, 'ip6_vti0\x00'}}, 0x80) ioctl$NBD_DO_IT(r1, 0xab03) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000001c0)={0x84, 0x0, &(0x7f0000000140)="0597260d2fb9306f747f65a077364d4a71799c1711958769307c1e0503def96ffdd28a4f0a6584c8b71b75dca5fc28ea5be73915b965094c46dfc980b0a9b89ecde4d9021db4a6724f7e61e7189351862cd352e6779b6992422a8bd542b29bd1d87052b476ecbf6a438478fe347b6ab841d585355faeddbdc836cc54dab7df", {0x2, 0xfffffffffffffffb, 0x3a47576d, 0x1, 0x2, 0x50, 0x8, 0x4}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x4f565559, 0x69, 0x0, 0x3, @discrete={0x7, 0x7}}) 05:58:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7008000000000000, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:28 executing program 4: socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x40500) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000000, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x1, {0x77359400}, 0x5, 0x3}) 05:58:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1000000, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:29 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x1eadc0, &(0x7f0000000180)=0x1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x9, 0x75735753, 0x9, 0xfffffffffffffffe, 0x0, @discrete={0x1}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x100000000, 0x1, {0xffffffffffffffff, 0x2, 0x8, 0x1, 0x4}}) 05:58:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x1d000080, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x3, 0x4f565559, 0x6, 0x12fc, 0x2400, @stepwise}) 05:58:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:29 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffe0e) listen(r1, 0x10000200003) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x23}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f00000000c0)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25, 0x1) sendmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)="8bb6cd019a678e3e62a6fcdf8b763b01a19dea84c60291afd9c1a179f227c283a3a0a4716943e78b47f8c6da70973b3106757450b3f53e9a72f644d9bec6e33599d4ea2c0096f1898cfedaeea34c10f2e552f7b7a558b220c0d4ff4b0c4b8bc7cba63f40fdca5ba2412b1c9593ad84fc9126241cb6b77e996bf758f03627d4ce3309b42ebbe46c89b19aa8b46a3f60fbb4a2fcbb445988d8c142370be2e17ef4", 0xa0}, {&(0x7f0000000440)="b737734136cdbe70a4c0e692694679945e541d7f21480ff06aecf7e8c9029c7e720de512fe1d9f4df3c180e9b63a3690041d5b6b94a39921b55656b90193a3120464f3fd03aef129e1c820e2cd952ca89151de0a4aace351e8cd50359695a218375017b36b3eb69eef7d04be39751e0ba05c41dd45bcf8282185aabff4f9614976ee8e43ef476ca7a050a1f2115d624ee8c5e96fcbacb97cc59c48ec851ff032505dfef1190274e5720de0d25ae21b4996", 0xb1}, {&(0x7f00000002c0)="aa8a58d89f18bf0176ff55fd543261a32c9e88784ba36b76633c9698a3a2443b2268aac26def74bfeda9ed1c32d6581f2b04a55055f4064fce91b0b7a716e20b1cae0cfc3f49da342a17b17134763ba0b3c79a21eb6812a8ed9109ec69768e5147ab7cc26f3fa908", 0x68}, {&(0x7f0000000500)="edccd4b19913b395fe9c25dd34cccb84e89e751bbfc8bbecdaef5140c1db4a68ac7a41f9b0f948f4c4a146fe442cbfc5e0bd6688d6bd36f896abffc36107", 0x3e}], 0x4, &(0x7f0000000580)=[{0x70, 0x11a, 0xffffffffffffffc1, "f8d8ff48375d63452bed6c1fe730abae41930dbf082a9b1893633829da64d385fc2a61fa787e44da9f2343da458bcb4cd85905a6378c03710beadd65af320391fce1d491e49b3041b6dfaf815d10b01de3fdf00ecb51863863"}], 0x70}, 0x9}], 0x1, 0x40) 05:58:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x70080000, 0x0, 0x0, 0x0, 0x80000001}}) [ 2368.213940] Unknown ioctl -1070311861 [ 2368.225175] Unknown ioctl 1080054598 [ 2368.253666] Unknown ioctl -1070311861 [ 2368.257674] Unknown ioctl 1080054598 05:58:29 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @remote}, 0x7f, 0x3, 0x0, 0x4, 0x0, 0x45, 0x80000000}, &(0x7f0000000080)=0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:29 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x72317559, 0x69, 0x9, 0x0, @discrete={0xd00, 0xd69}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 05:58:29 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000180)) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={r2, 0x80003, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r3}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x3, @stepwise={{0x78e}, {0x100000001, 0x3}, {0x0, 0x6}}}) 05:58:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7008, 0x0, 0x0, 0x0, 0x80000001}}) 05:58:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x50000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200000, 0x82) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e21, 0x200, @local}}, 0xeee, 0x9, 0x1f, "4b3be114953fcf9a3a20bfba9ee8f77b1c507925db36cbc37aa7be0ed548b9045d5fc9529ab359e995e0520c65774c7c52cacdeb56547c3b97f4217af1b0c5b6946d9bcf192ef50507bb8cefee321e04"}, 0xd8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x4000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000001c0)={0x7ff, 0x2, 0x2b33ba9c, 0x10, [], [], [], 0x4, 0x1, 0x20, 0x9, "31a7bfa47ba79d5791922da880a79dad"}) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x3ffd, 0x1000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x2, 0x0, 0x0, 0x80000001}}) 05:58:29 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x30000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{r1, r2/1000+30000}, {r3, r4/1000+10000}}) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000000c0)={0x0, 0x50323234, 0x69, 0x0, 0x0, @stepwise}) 05:58:29 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:29 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x400, {{0xa, 0x4e22, 0x100000000, @empty, 0x2}}}, 0x88) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xa82, 0x401) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x2}}, 0x18) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) 05:58:29 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x73754f7b, 0x69, 0xffffffffffffffff, 0x3, @stepwise}) 05:58:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:30 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) epoll_create(0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x800000000003, 0x4f565559, 0x0, 0xfffffffffffffffe, 0x3, @stepwise={{0x2ec8, 0x1}, {0x6, 0x40}, {0x1, 0x9}}}) 05:58:30 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x2000000, 0x0, 0x0, 0x80000001}}) 05:58:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x8000080, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = dup3(r0, r0, 0x80000080000) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) 05:58:30 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}}, {0xa, 0x4e22, 0xad7b, @mcast1, 0x8}, r2, 0x3ff}}, 0x48) 05:58:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xde9, 0x400) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x80000014}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0xfffffffffffffff7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x1e) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x308, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffe9b13d67}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x48}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9dd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000000}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x8ac}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000480)={0x0}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000500)={r3, 0x6, 0x100000000, 0x0, 0x2000000000000, 0x2}, &(0x7f0000000540)=0x14) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000004c0)={r6, 0x1}) write$binfmt_misc(r0, &(0x7f0000000400)={'syz0', "5377fc6ab8f44666d1f02518dc78fe3044ec7d5763900608c388d60561f18ca25c939e4556b8840dc5d6156132339532a0a63457b74212f7c3a9be84e4f5770708a42da24f843a2b7c270d161ff3f5c95984e331b4e6bc0fba97be366a570d6f5c6093f669ff7566e6316b60423f58e5b894c98ecb4c7957aac621dd"}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 05:58:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x10, 0x0, 0x0, 0x80000001}}) 05:58:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(0x0, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:30 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 05:58:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(0x0, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x870, 0x0, 0x0, 0x80000001}}) 05:58:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x8}}, 0x18) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, [], [{0x1, 0x0, 0x0, 0x3, 0x3164e138, 0x4}, {0x7f, 0xffffffffffffff81, 0x10000, 0x40, 0x81, 0x2}], [[], [], [], []]}) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:30 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x7fff, 0x7, 0x7, [], &(0x7f0000000000)=0x2}) 05:58:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xfffffdfc, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(0x0, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100)=0x4, 0x76) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000080), &(0x7f0000000280), 0x8) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x20000000000001, 0x2000) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000240)) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x628b, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000002c0)={0x5, @capture={0x1000, 0x1, {0x3, 0x1f}, 0x0, 0x7a5b9d40}}) fadvise64(r2, 0x0, 0x3, 0x7) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80200, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000180)={0x200000000000000, 0x7000, 0x3f, 0x3, 0x9}) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f00000001c0)) 05:58:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x200000000000000, 0x0, 0x0, 0x80000001}}) 05:58:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2017) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:30 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x502, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000100)=""/179, &(0x7f0000000080)=0xb3) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000001c0)=0x5) syncfs(r1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x7008000000000000, 0x0, 0x0, 0x80000001}}) 05:58:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1000003) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x1, 0x3, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:31 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffff8001, @mcast2, 0x1ff}}, 0x7fffffff, 0x6, 0xe3b, 0xffffffffffff8635, 0x2}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0x7f, "4e0277460b10922aa150d36de9fbc25fe7ff2975d1b8a4017ec35ea6e7f5e26c36b96b4965475a7d82e9159d076ff577843407ab5498e26a8fa7e8d4cb29b2d56d95c68f7b5b6bebf90540d4c922e5fa05a354e07f222fe188d5188b58943f440d722c237c7f18b4e15abe7b3a81f104395ed648ce27b70d8ecb15d061d0d9"}, &(0x7f0000000280)=0x87) r3 = add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r3) 05:58:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x4, 0x7f575f79, 0x8, 0xfffffffffffffffe, 0x0, @discrete={0x10000, 0x81}}) 05:58:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x10000000000000, 0x0, 0x0, 0x80000001}}) 05:58:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x4, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:31 executing program 2: r0 = syz_open_dev$vivid(&(0x7f00000007c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x2, 0x1, [], {0x0, @reserved}}) r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x8010000000000080) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x100, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r2, &(0x7f00000005c0)="6e8551b158b7b3c6b400a2f7dfe0a69d672f79783b3d9b68c8d75767477257f128e0251ba1a40bc7d48bbb772ed97b7a1af1b72473f78f5ab1710b61844cc90a12daa1850270148cc9cbd41bdc103b770e27230da69682c8ca52b030452c017fb40d91bca533f162b7c703b109b2c6a24001b402218f3fe7f127ab445e9bb057fd509cf405d9daba36187e2d6533c97f7c99fa2f70de68423761d2f0f0ecdf1000d8844c328cd8b033e74a0b85e33f850df731bda80f6419ba29e03ab7496898579e702b1be1071123150c0df30886", &(0x7f00000003c0)=""/190}, 0x18) listen(r1, 0x10002) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000040), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) socket$kcm(0x29, 0x5, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000700)={r5, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000140)=0x84) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000480)="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", 0x10b}], 0x1) 05:58:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:31 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x101000) 05:58:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x100000000000000, 0x0, 0x0, 0x80000001}}) 05:58:31 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x7) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000180)={{0x7, @addr=0x2b74}, 0x8, 0x7, 0x5}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x3) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f0000000100)}, 0x10) 05:58:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in6}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="120a0400020000000000000000000000"], 0x10}}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000180)=0x10) 05:58:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x1, @loopback, 0x6}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) pread64(r2, &(0x7f00000000c0)=""/29, 0x1d, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x70080000, 0x0, 0x0, 0x80000001}}) 05:58:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:31 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2a7c, 0x801) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @loopback}], 0x10) 05:58:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xf6ffffff00000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x100000, 0x0, 0x0, 0x80000001}}) 05:58:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:32 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) 05:58:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0xc00000000003, 0x4f565559, 0x2, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x2, 0x3, 0x6}) 05:58:32 executing program 2: r0 = socket$inet6(0xa, 0x800, 0x1) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0xf}, 0xffffffffffff61d0}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0x140}, 0x8) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000040)=0x1, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:32 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x28000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl(r0, 0x1, &(0x7f0000000100)="219c4e96d65b807c7f4aec9cc6fa95acc2b4da9bd29ea4dec04ac7cce02a467fa1926f994b92bebcf3a84f86feb886cebc7972a283ad5c1d7a21b01f63ab11d8dfd1e5b5e253c130d140e345e74ff4fe0780c44ca3282f5fb93f643186b6ae2d40bb5d9346ac5e4dc76741637710ea12dbad1a58a4b34f328c4e401bc8776441c8") prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 05:58:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2, 0x5}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) socket(0x0, 0x80005, 0x10001) 05:58:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x7008, 0x0, 0x0, 0x80000001}}) 05:58:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) readahead(r2, 0x8, 0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x60000, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f0000000080), 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xd00000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = dup(r0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)={0x200}) read(r0, &(0x7f00000000c0)=""/81, 0x51) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x800000000005, 0x4f565559, 0x10001, 0x4, 0x0, @discrete={0x6, 0x9}}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x9d35}, &(0x7f0000000200)=0x8) 05:58:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffff, 0x8000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000380)={0x4, 0xfe, [], {0x2000000, @bt={0x8, 0x5, 0x1, 0x2, 0x4, 0x80000001, 0x7, 0x8, 0x5, 0x100000000, 0xfff, 0x9, 0x1, 0x0, 0x8, 0x12}}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x4, 0x80000) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x4b1, 0xd41, "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", 0x7e, 0x1, 0x8000, 0x2, 0x8, 0x80000001, 0x7, 0x1}, r2}}, 0x120) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x80000, 0x0, @stepwise={{0x1ff, 0x3f}, {0xfff, 0xffffffffffffffc0}, {0x3f, 0x7}}}) 05:58:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x1000000, 0x0, 0x80000001}}) 05:58:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x2000000, 0x0, 0x80000001}}) 05:58:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x460000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x4000, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x9, 0x400, r2}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) memfd_create(&(0x7f0000000340)='/dev/video#\x00', 0x1) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x80, 0x30, 0xadc, 0x4}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r4, 0xfffffffffffffff7}, 0x8) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r1, 0xa, 0x1}, 0x14) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000300)={0x8001, {0x7, 0x4}}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r3, 0x0) fcntl$setown(r3, 0x8, r5) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000002c0)={0x7014, 0x100000000}) 05:58:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x10, 0x0, 0x80000001}}) 05:58:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565556, 0x0, 0x0, 0x0, @stepwise}) 05:58:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000100)={0xffffffff, 0x0, 0x100, 0xbe, [], [], [], 0x3, 0xfffffffffffff870, 0x5, 0x8001, "80b51601592001dd8e5dd9897b5f2a11"}) 05:58:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x1) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000001c0)=@hopopts={0x2b, 0x24, [], [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x18, {0x10000, 0x4, 0x31, 0x61, [0x3, 0x8000]}}, @jumbo, @pad1, @generic={0x4040000, 0xe3, "671c65087385c55b3e734f4e30d50c612b8f15c732307ea62fce0dee81f943a39246157b0c7c0fc46fcaefd80910c9d37d2edbb286b79bd8972c5697fb418c624bf94611974967993bc70da5e8f166413e81e6973a3ac8fd46c3b2f85441ab72636ce896ff3ffe81b16703556d88836da906e48e834d298919e4d5eea3106299552f606524090c7bfffbef5d2539ba00bdb2b81e405762ccd3ca7ca86ad2fae9178cb46f78e239ebc44a59fcb03c6c1f7e8fc703b72707742ac2a709e87137130ed83f641910b4e3bb0842fce0bfd3c35065adabe79a93cb85830baa7d2df05f846f55"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x2}]}, 0x130) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)="80", 0x1, 0x8000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x870, 0x0, 0x80000001}}) 05:58:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:33 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000000)={0xb0, 0x6, &(0x7f0000000100)="4f8a2edc429b628794dc43e02a2a8cc12ba3301cd4b2350a9eba8db577ac0b964cda1c05f9094a6cbed2da8f263a8f902aac56e208193e16250df2edb9b968c654e79a039c", {0xff, 0x6, 0x7773577f, 0xd, 0x7, 0x523c, 0xa, 0x4c71}}) 05:58:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x19000080, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:33 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0xdfffffffffff7fff}, 0x172, 0x3) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x384c4150, 0x1000000000000069, 0x0, 0x0, @stepwise}) 05:58:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140), 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x2, 0x0, 0x80000001}}) 05:58:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) rt_sigpending(&(0x7f0000000280), 0x8) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x1fffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4000000000000006) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000380)="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", 0x1000) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/109) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f0000001380), 0x8) getpeername$llc(r3, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000140)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @discrete={0x100000000, 0x8}}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000080)=""/35, 0x23) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80000) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000180)=0xf000) 05:58:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x200000000000000, 0x0, 0x80000001}}) 05:58:33 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r0, 0x0, r1) 05:58:33 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) 05:58:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x42000, 0x0) getsockopt$packet_int(r0, 0x107, 0x1000000000001, &(0x7f0000000080), &(0x7f0000000100)=0xc1089971cf9e7301) syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x80, 0x101881) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x6287, 0x4000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0xfeba) 05:58:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x3f000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x100000000000000, 0x0, 0x80000001}}) 05:58:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x1, 0x70, 0x6, 0xfe, 0xcda, 0x7, 0x0, 0x7, 0x40000, 0x8, 0x20, 0x5, 0x41aa, 0xfffffffffffffeb7, 0x20, 0x5, 0x6, 0xe124, 0x0, 0x48000000, 0xffff, 0x9e72, 0x7, 0xffffffff, 0x7fff, 0xff, 0x90, 0x7ff, 0x4, 0x1f, 0x401, 0x1, 0xffffffff, 0xfffffffffffffffe, 0x3b09, 0x6, 0x4, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x1200, 0x9, 0x0, 0x2, 0x8, 0x10000, 0x5}) 05:58:33 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r0, 0x0, r1) 05:58:33 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000140)=0x4) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="614cc6da5702feb19954", 0xa}, {&(0x7f0000000280)="64b423623a60e6311f79c1e4ba5312399ffd210ec8cdff29763e149ffbc18d9c24c579bc7532da69d794f72017b06270cc98abacb974cd692c1fe1cac49f7c94f8d16bd3f857012ac95eae5700fc9456252bb12a2bdd77ce851f96654f75f116b72d7dbd32675591f133bb453c0421b3ab1b1be880b848c399c44458afcfcb3e15f218f4db0a58b0a17822230abd7f4e0234d536afb9a6ca11c79e871cee61299b3006628d10f7", 0xa7}, {&(0x7f0000000100)="88319706f0d393988c290707c010d46a16d605cc066faf44e1ac940b8637d8475ddf094bd639821576bee79695d7fda33c1700245f1bfe8da60d6e1f", 0x3c}, {&(0x7f0000000340)="51222b6fc88d8707ce86b7fd5faaed8cd492cc9db287cd59510a2b60f04c3e8bdfc9278e587c14ef7f489b7a8dbba9a1bd411898e833a096fb84d3796464af978bf3b856f30d3103a29f2f6cba826597b4d692839e443fb3adc3d6387ba0709a48f494ffcf3d3622ae4818de", 0x6c}], 0x4, &(0x7f00000003c0)=[@rights={0x28, 0x1, 0x1, [r0, r1, r1, r1, r0]}], 0x28, 0x20008000}, 0x4004050) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:33 executing program 3: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x1, 0x4f565559, 0x69, 0x0, 0x0, @discrete={0x9, 0x100000001}}) 05:58:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x70080000, 0x0, 0x80000001}}) 05:58:34 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r0, 0x0, r1) 05:58:34 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f0000000100)='/dev/video#\x00', 0xffffffffffffffff}, 0x30) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x4000, 0x0) r4 = accept$inet(0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r5 = inotify_init1(0x80000) r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/exec\x00', 0x2, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8080, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000440)={r8, 0x9}, 0x8) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000002c0)={0x2, 0x8, 0x7, 0x0, 0x0, [{r1}, {r2, 0x0, 0x5}, {r3, 0x0, 0x6}, {r4, 0x0, 0x78}, {r5, 0x0, 0x1f}, {r6, 0x0, 0xffffffffffffff02}, {r7, 0x0, 0x2}]}) r9 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r9, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r10 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) 05:58:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001400)=""/188, 0xbc}, {&(0x7f0000001140)=""/107, 0x6b}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/82, 0x52}, {&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000f80)=""/236, 0xec}, {&(0x7f0000001600)=""/121, 0x79}], 0x7}, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0x7fffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x84) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x73b, 0x4f565559, 0x7, 0x0, 0x0, @stepwise}) 05:58:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x4000) ioctl$TIOCNOTTY(r2, 0x5422) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x7008000000000000, 0x0, 0x80000001}}) [ 2373.171609] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor3'. [ 2373.233123] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor3'. [ 2373.286773] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor3'. [ 2373.320097] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor3'. [ 2373.332007] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor3'. [ 2373.354693] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor3'. [ 2373.364056] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor3'. 05:58:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x5, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)="80", 0x3de, 0x40000, 0x0, 0xb8) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:34 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:34 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000015c0)={0x0, 0x8}, &(0x7f0000001600)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000001640)=@assoc_value={0x0, 0x8000}, &(0x7f0000001680)=0x8) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000002ec0)={0x1, 0x400, {0x401, 0x2f, 0x1009, 0x7, 0xf, 0x1, 0x2, 0x4}}) sendmmsg$inet_sctp(r1, &(0x7f0000002bc0)=[{&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x8b7, @dev={0xfe, 0x80, [], 0x13}, 0x80}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000002c0)="998f9e2129e5e6ab3903b926f2584fab53f2284234e295b0a623d04300146c8f7b400bb599d82dfc65397061190c0205b4a7e0d455c3b952", 0x38}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="f2a91a76bb778345926829011deb107d9dbb47a9e47ceaee063c1fdb8fa662d2389665e05c55bc443f88cbcd0290d6a0dc5f54856ff46204dc85e4b97d37eb3794a4300a5b0b9c668c53e4966b1f2e0cf2449da7960165152b66f55e20f101e42755914b129137228fc53c81d81af64dc9e2ee86af3a880eaff7595dd14941539d9d773286a04d0c55768e83defdf91a3dfe1ef46e9ec3bdc8619a7fabb9ac606c59bb", 0xa3}, {&(0x7f00000013c0)="bceb1a4e4ca36c0058d5b8e4c779922a1055a9e8a51f6ece62694d2484a4189a62897c8bc5ca93b46ee81bef9015c49c8d60ecb562e29b5a92b5af048b1a32b99c5e686da2840b3fa0442dc5294537e659bab000b141f8917329c1a4f5", 0x5d}, {&(0x7f0000001440)="30e3e6c9a636dfa2634a7bfd49f590211dbb5c4774c7f8860c425fc043574bb3d08dfe99ae8b814266bd40bf46231e7fec97dec63d695f732eb9185caa87dd4eee2b067d8aae9706e317112c736bf7bc7b7a0af557b0fccaa642afeb32a808f82207b6f880838e59e82ad308ffebd023c774ec561d5ba9e1e78988ca5bd9904b15178276dfc9a513e8ca985de1aa251db9b9ef00e4538773c904274aa5f2410c5a9580b2beddaca4a104d67999ec07043d5c890bbd4808e3a89974db4c32944d3217a11d66c8ce41c736eef98f44b1d8b4db1ea3", 0xd4}], 0x5, &(0x7f00000016c0)=[@authinfo={0x18, 0x84, 0x6, {0x1ff}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x40}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1f}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x820d, 0x200, 0x6, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x4, 0x1, 0x2, 0x0, 0x2, 0x1f, 0x4, r3}}], 0xf8, 0x4000}, {&(0x7f00000017c0)=@in6={0xa, 0x4e22, 0x6, @loopback, 0x2}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000001800)="cdf34ff19c66305d00914a7d6fc9683db6c284450dd4975072b580bb49c4f13cf3a72285fc7610dfcfad89c85968c5ab7d3e26cd22c58d9563ff31727b6361fb6d1c5ce10ffb7b3812109565d3652b16e4fee50951ad26b9bf8a4c4eba663960e67959e8d6f07c33849ad1b60643bf09c51007af9752f7a25d62010a61d9eb29cacd8ed4b13d512b5e5375cfdb71dd9aae0570443fb67b4a743ec38f5d29eccfad66432ce8143fe49e4fb662b439e58472ac9a0375e73b38a331430dd2e58bb3f3e024261913337bd587", 0xca}, {&(0x7f0000001900)="2e2a96a31490d5b784aae307e83c24d30920335000", 0x15}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="fecb0041fda013a189392a4bb584f48f9c36c0cd9a0d86d2f30ef52b61a5cdb929bad6f88550fe364cb7bf", 0x2b}], 0x4, &(0x7f00000029c0)=[@authinfo={0x18, 0x84, 0x6, {0x4}}], 0x18, 0x40000}, {&(0x7f0000002a00)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002a40)="5ed6f99b66b899800b1c67a75683d91c03427caaeb7b539af0510a1b4e1e6e1aa165271eea00c279cb951c417a60814cf7cb55cbec537dbf01f696df8f01b3950d7f67a475074f5d8081a6fc675a05ccd9a1114944a14e932732be454abf2cb60975a132a238bf185ec048d4dc", 0x6d}, {&(0x7f0000002ac0)="9d0a53b8c6e2ecb10bfc4bfe776688e6291f7cb13b5f426770a0b52f9b83a2a5db4fac448fcb34bbb0c97c542d30db20365094ef114ae7ae7ce88201b574644ad2b2319cb2f18ee5a7a78488fe625658633d5c54bd9053a190aa7a", 0x5b}], 0x2, &(0x7f0000002b80)=ANY=[@ANYBLOB="180000000000000084000000050000001000000001000000250000000000000084000000000000009f00000003000800"], 0x30, 0x4}], 0x3, 0xc0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000200)={r6, &(0x7f0000000100)=""/225}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) getsockname(r1, &(0x7f0000002c80)=@hci={0x1f, 0x0}, &(0x7f0000002d00)=0x80) fstat(r5, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002dc0)={{{@in6=@mcast1, @in6, 0x4e23, 0x20, 0x4e23, 0x2, 0x2, 0x80, 0x80, 0xad, r7, r8}, {0xffffffff, 0x6, 0x1, 0x9f8, 0xdee1, 0x4, 0x9, 0x3ff}, {0x7, 0x9, 0x3, 0x1f}, 0x7, 0x6e6bb3, 0x0, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4d4, 0x33}, 0xa, @in=@multicast2, 0x3500, 0x5, 0x3, 0x1, 0x4, 0x7, 0x3}}, 0xe8) 05:58:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x10000000000000, 0x0, 0x80000001}}) 05:58:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xf, 0x1, 0x2, {0x7, 0x22, 0x0, 0x5}}) 05:58:34 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x1, 0x2) sendto$inet6(r2, &(0x7f0000000440)="80", 0x1, 0x200020000000, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x403, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x68b, 0x208400) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x78, "ac02c17f969986ce6352c56e9bcb4eda167f4b8287f4e28ead1d0fb7289fbd1d4dddb83d795d509a44255cdac461109bdcc1282cf1a54a25ee5668213a1ab5ed10a153f6823091a3d416f1ea40e591071a433f77a2af538bccd26526c82dd7d442537a6ddc0c5280d6753a463f082b33f797267d09092d8d"}, &(0x7f0000000200)=0x80) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r5, 0x2}, &(0x7f0000000280)=0x8) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) getsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f00000004c0), &(0x7f0000000480)=0xfffffeea) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x8) 05:58:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x100000, 0x0, 0x80000001}}) 05:58:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) socketpair$inet(0x2, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r2 = dup2(r0, r0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f225d0f01b00001c0fe0f01c8b805000000b9630000000f01c10fc72d00d0ce1d0f79db0f30c28c000fe1d30f20e035000001000f22e0", 0x37}], 0x1, 0x11, &(0x7f0000000180), 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000080)={0x2, 0x400, 0x9}) 05:58:34 executing program 5: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x6, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 05:58:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0xc000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x7008, 0x0, 0x80000001}}) 05:58:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x3f) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xe7, 0x40000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:35 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x68e}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5c0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x80) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x0, 0x10cf565556, 0x1, 0x6, 0x1, @discrete={0x10001, 0xffffffff}}) 05:58:35 executing program 5: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='map_files\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={"760000000000000002000000bd6800", 0x43732e5398416f13}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pread64(r7, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6, 0x3, 0x0, 0x5, "576cf889fe5106c80a43e000970080d68f01d65f81b109bcfa7010b4d0daabff0a136150d8c4b665599dac0ca6bc700b19888fff7b513c7efecc8b43fbdefb8880113ee0338499192161d8885ec07873"}, 0xd8) dup2(r6, r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x1900008000000000, 0x0, 0x0, 0x0) r9 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x20000) setns(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x15}, 0x2261}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000280)={r10, 0x9}, &(0x7f00000001c0)=0x8) r11 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000200)={0x8, 0x2d}) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r11) r12 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r12, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r1, 0x0, r2) 05:58:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x7008, 0x80000001}}) 05:58:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xa927}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x7, @remote, 0x2}}}, &(0x7f0000000200)=0x84) 05:58:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40040, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000240)={0x5e, &(0x7f00000001c0)="d9414382b6f858d44e1b46f8c9c7a660fa33f9f21feb0e33c0fc14c1ac22c5b9eb2a37b39cfbc0c4e83540f2f252b4860a249b0456447b09cc75217e3ea2c05481d95835339f9ad3dd69310172617ed7a38b3123ed77e139d0d33fa6ad09"}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x7, 0x30}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r6, 0x4, 0x3, 0x5, 0x3f, 0x2}, 0x14) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000000c0)={r4, r5/1000+30000}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x100005a6) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000000)={0x4, [0x3, 0x5, 0x7, 0xfffffffffffffffa]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x870, 0x80000001}}) 05:58:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r1, 0x0, r2) 05:58:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x1a00008000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r1, 0x0, r2) 05:58:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:35 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x800000000000, 0x0, @stepwise}) epoll_create(0x0) 05:58:35 executing program 3: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6287, 0x200100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x8) setsockopt$inet_int(r1, 0x0, 0x9, &(0x7f0000000080)=0x7b0000000, 0x4) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)=""/186) 05:58:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x7008000000000000, 0x80000001}}) 05:58:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise={{0x81, 0xffffffff}, {0x1, 0x1}, {0x9, 0x9}}}) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000180)={0x1, 0x7fff, {0x200, 0x3, 0x7, 0xddeb}}) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x7, "317e514b6539caf99f153b6b4185b369b2c930435f5168fbfe5f1461e979c84d", 0x6, 0x1, 0x7c, 0x100000001, 0x4, 0x0, 0x1, 0x5}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4c600, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) write$smack_current(r1, &(0x7f00000001c0)='eth1)[\x00', 0x7) 05:58:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, 0x0, 0x0, r1) 05:58:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @ipv4={[], [], @loopback}, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="638c92c66c1f7379ad90a93b2aa56e49507b7c89fb401d61ef0b6c7c75bee577525d52cbdd4369dc424e24bac17035d16b3f11116a63a8eb", 0x38}], 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000040)=0xe8) r5 = getgid() write$FUSE_CREATE_OPEN(r3, &(0x7f0000000380)={0xa0, 0x0, 0x4, {{0x2, 0x3, 0x3, 0x101, 0x100000000, 0xfffffffffffffffb, {0x1, 0x8, 0x80, 0x400, 0x0, 0x81, 0x5, 0x1000, 0x2, 0x7fffffff, 0x7f, r4, r5, 0x3ff, 0x1}}, {0x0, 0x6}}}, 0xa0) 05:58:35 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x800, 0x3) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x7, 0x0, 0x0, @stepwise}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) 05:58:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x10000000000000, 0x80000001}}) 05:58:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x80ffff, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x8200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, r2}, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x3, 0x800000000000006) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x20000, 0x0) recvfrom$inet(r1, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x330) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = accept(r2, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4c4, 0xd3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x677, 0x0, 0x5, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6991, 0x80000000000, 0x3, 0x0, 0x4, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x100, 0x0, 0xec, 0x0, 0x0, 0xfffffffffffffff9, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000712600000000000035060000ff000000bf25000000000000070500000e0000000f65000000000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf250000000000000f65000000000000070500000e000000bf5400000000000007040000040000003d43010000000000950000000000000061540000000000006b25000000000000070500000e0000000f6500000000000007050000040000000f65000000000000bf5400000000000007040000040000003d3201000000000095000000000000004d54000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x0) exit(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)={'syz1'}, 0x4) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000440)={0x10000, 0x1ff}) listen(r0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10) sendto$inet6(r6, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x100000000000000, 0x80000001}}) 05:58:36 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x800000000003, 0x4f565559, 0x0, 0xffffffffffffffff, 0x2, @stepwise}) 05:58:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x200000000000000, 0x80000001}}) 05:58:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) r1 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='/dev/video#\x00', 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000200)={0x1, "874d0203e939ee96ea2308c64197bddf5ffdce95a4ff4ac1d41d131e2355101c", 0x5, 0x100, 0x1c38cdfc, 0x7, 0x6, 0x2, 0x6, 0x2}) keyctl$instantiate(0xc, r1, &(0x7f0000000140)=ANY=[@ANYBLOB="75706461746520656372797074667320747275737465643a706f7369785f61636c5f6163b261b43cbba10029cb6f802c86ce8161636573732d7472757374"], 0x3e, r2) 05:58:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, 0x0) 05:58:36 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x800000000000b, 0xfffffffffff7ffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r1 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000140)='Q', 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r1, 0x0, r2) 05:58:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x70080000, 0x80000001}}) 05:58:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x5000000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:36 executing program 3: lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f0000000100)="2f2ca700", 0x4, 0x3) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000340)=0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATFS(r1, &(0x7f0000000940)={0x60, 0x0, 0x3, {{0x1000, 0x1ff, 0x800, 0x7, 0x6, 0x1a6, 0xffffffffffff0000, 0x9}}}, 0x60) lsetxattr(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=@known='trusted.overlay.impure\x00', &(0x7f0000000b80)='ð1eth0%vboxnet1ppp0\x00', 0x17, 0x1) r4 = getgid() r5 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) getresuid(&(0x7f0000000c40), &(0x7f0000000cc0), &(0x7f0000000d00)=0x0) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000009c0)={0x0, 0x0, 0x2, 0x0, [], [{0x0, 0x8, 0xff, 0x3, 0x4, 0x2}, {0x0, 0xe39, 0x83, 0x3, 0x6d0, 0xffff}], [[], []]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000700)=0xe8) getgroups(0x9, &(0x7f0000000740)=[0xee01, 0xee00, 0x0, 0xee01, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) sendmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)="8e61b13e6909b81a1da990aa87113e05a2519cd6420735ade4129025426ac5ec7e66d6e4d90c98d18649479d3a2b7d425f371cced06b0417a41e99332ff8937feccb07f84d3ebd7af5", 0x49}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0001000018000000000000000115100001000000", @ANYRES32=r0, @ANYRES32=r0], 0x148, 0x8800}, 0x4000000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:36 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6283, 0xfffffffffffffffe) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x32315659, 0x0, 0x0, 0x0, @discrete={0x2, 0x8}}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x80400) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0xc, @output={0x1000, 0x1, {}, 0x3, 0x7ff}}) 05:58:36 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) 05:58:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x100000, 0x80000001}}) 05:58:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000001400)={&(0x7f0000000100)={0x27, 0x0, 0x1, 0x6, 0x7, 0x100, "357761530544c926c19903504eaa55ac9b321c05db4ff756d61ac017f0d6e17ce008b1f4fbbf090d3cb64c6d724d4658e314cc872f7730402c60b5b87e3d45", 0x4}, 0x60, &(0x7f0000001340)=[{&(0x7f0000000180)="775ef65f8397571de50c77ff2fadde3d2fe4bdcd755a8b1f059397bc0c029bd0d191fe8855d44d1f4cba89bf1f25591745196eafcc82ef5a05514863bdceb29d0351ffb35b444106dd", 0x49}, {&(0x7f0000000080)="6f11c93d0ad9e9d457c385724ae7c28dba7bfcaa8d8c67", 0x17}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="da0fad6889f652f8a628776ec2778b979669188a9e19d9", 0x17}, {&(0x7f0000001240)="de942ed321b5f11d0f8d2ab3934f4ed8440d1cc96098807422f5d1c98fd25761ac1fa2fd6b179f443cd71d8cd57f2f93e0701993a2c2e5262abdefb5420fa9242a2490dc36e8ebf399b927f318832a0103fb16106c12873103bdae0c3bd3ea78f5294aa16419cc9830e10e23fc765e56176e9d5d622e9ffc21374d13d1cafe8f37c78ac09e2561dfd97c77e68ba63fa4a4c81d8767a05da3ac648f344444465dc607d33f29056af1bbf3a6b4e367d550aa321050eff9d05b991757fccbbc15b22f9266259af70ca602addcd3345debc4f816aaa3757f9f020d1f906aca74b66fbce2f10032b64c23231e51f83876376d04b8", 0xf2}], 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="4000000000000000000000000000008074662160611f20689712549b6832a3c85e8ccb1787077ae0edcfd27ecde9860e5087bf7d5759f3975439d63b510000002f7c9c06fe6b059c65b7d3185db43f59203bff62bfcd038433a5cef9a1a38b5ba5c06ea4dd3e0122955737d59cb1cf12e5d5"], 0x40, 0x4000000}, 0x4000000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001440)={0x9, 0x8000000000000002, 0x10000}) 05:58:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x10, 0x80000001}}) 05:58:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x700000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) 05:58:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, [], 0x17}, 0x5c2c}}, 0x20, 0x89, 0x80000001, 0x1b0, 0x5}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)={r2, 0x8, 0x1000, "aded4376d7b179c00b8b2b079d7669a087a1ed50b845a0fb5aac9f9c202d8ac176f33cbc721a7707ecd6a4a2a56b22699ff74712fa106561a0d2ace32ccd37e305f02256f58dc66a2e2f04fa461b016f5327448c349c0420607faeefbe61a248b8b6f30e9d9b63dce73b6d0357481456b5e45189b5f99203b0db8e240d8ea4ceab410f0526d32f41f0d962e97739b6aca82eca5e8d813f42be4c854cc48e9c83a67e4fee33f1daa56a11dfeff7ce10cb91bc88c1d88f2537df0f20d0489b378c553416e8cc9f4ca2e80c9acc52465c94475eb6e754f58e41e90e8442adde1adc8d90c57c32b59ef43fb0265b79abf06e8944a4c7da36125e6b2f94c2f7b00de11e24b49bd5e86e0022825ff10810551a7f20341b0cb57d48a517f4af266863f8a7ff7776bf017f2e587f0a9673953f41eb0bd7b2cdbb5eed47efc0c218985ec5dc0780c86c5d09a2e40d8de4f3669d7c1a7ace266cfd0816e63a45f72543772db403204797aabcbe20c5498d8236163184ec29790d6e19bab81bbf633bda22622b3a08cb7e679e9677aa75c268424695970d6a06cc499e35e5adbb32e72a0f8b8f584961b04cefd1947cc0b24b7019918c602a0e8eaa94f2932a3534cfead8112c150833a999e09cab33f0461b4dd34f61f26d38f529c11559a3cd37b7beefd3c292ea89de6869986f1a7be0cee23f84ac945e9f9a88b60b6687ce99d56f34e271ee23909e5951034ea9873b6e662e50accccabb9fa20fb4ea052ea861da44067665fb10d02ba0c828835ab4c03f6f412810f9f898be1107982856ad6100c14639ecc46234db28863f3d1b71681dc9c6f4268355b86845fe12f388b42846ae4a6a5df0a6d8e6bd14a21141e26d8ee4fecea253d88d38a6166bc0626abb0df88d25c0a89c93847606915cbd65ce5e43c15a734d03dce4c83e68238da28f9f254b86ba635f9392b3cd65eaa8014ee99963b2d4e47dfdb46d4f50436b7f14edb8d247806ec7a9f1877b2d012d8c7de3408df67d9fbe2c3b9c91773a57fed5c01b7f9171f7940c256bb1efbb8c44716d6b97018df1770a1daa28e5f4673f6f6a65e503fb829291742e201d4677c667e63bc59efaaffc1fc39031136e7acfd6a5f28485c2b4965bec45f7c085d181efbe6f8b642d4c50055e6c8ad7acc60792db1bfcd1ed8d2bae36b250b7bf84d058516e4b8adeb39f99463a94b6d3ff132276ffe7eaa8c1593e2669688172e590c47d612d6b9f79fc5b562e622b97c0684ad1868cfe451913da0d67fe967657d5fffb4ee498fc737658f272bdf6521fd6fd2d2320c9da3cb960e586ac4cf60881082c1c3fc554e1cf5c9ca99907aae2cd45c5174e66d31c7c28ba738e159ad0eeb62b1e3dbe71f97c36c3ac3f97ed6469669f466cc8ff491d25cad1133bedfcc0401b55b38cfb77c3ddaa5b505eabee746f80f8faef4beea1c4faef3fa4a5a7b2b088fcf2462d0a103d2567c14a527b46b040f867dba72d5895005f3b6403b5961caaf55476f2fbaabf1c019e9a8dbc8840de91321d4fb62bb86ff7dba4528d94ead15fc791308c27b4644219d886585a408d34df39ad6e52f8ea4a883e3e0e6d7950c6abb3b46461fb4ddb546eb01b466b0884d89367af4928fb1f57e6864b81a7b912af9cf73eb1d1eb14ff27ed23b8d6c14188d05c5ea7518179b1fa11c387f3c6f317464c30f422a6e499a0d4aa31c8b777869cb6fabab519b04bab498d505c29c4e5f0baaba9b4ced0de4e78048cfbaeb843fe660d8d01acc93d9c555232c8aa60a1df15032601ee093a36c98f8c606566db6eef5a0b569078c03a07ad3d5d09e4abcfd4c8ec55324a3f820f24bca0695a4372b4f5b402c4a195c378dff829f1cdefe57a6559943192d775bc028b56382986c56d8707cf2acdf15a26d22ef6ab7693bf0ec7c1496397dcd00c91fcff4fb763c314c31d9ce38460604f4cc0407b52d2dae8a98e15881c5df7b80de5126bd54b6e684abf4e40459bd93f320a05da93e805e0b7b5a89586f603ad8ddd5dc3b6e49c2a23ece8843ccbbeabbd7c0a440ccc6684fcf7ee8b153084f924e5fdf3aedec008a56e1b8c0e650b85656eae29e4e32516b25510e47cdce36cb1d721e2b5c22b09cd85b61bcc6754a54d03884a92504071dc667f736abf90bb2b4f5fecca297b1bcf630c889b55303f4b97b87ca52c304fbeb6a7ff2a7f6b1cd4f20374574b7feb50f0a6c9c05fd953fddae7bfa619b56c302c77af04398227e24598705e96ee2f978b246544cec4727c43a6abebb5823c3164b22a7b2c9c499a41aeefa666deadaf8bbb38a23b8278be4285fb42fe91cd25004303a4cfb2db95fd0038e22e7907413f8f75c48061ad4e2a9007bf4b3e6a120adb50dfdf2995c872e8960cb037bc0b7024a0712b48914277afbd8a47142952d7502b9d15521605fd093e244679d4d6f5e23914546e93679e36c49e6293246aa0bcf6e07c1627ccd0763301774ad55fda512f3b63622eed5991339152ba69bb9e71ca1af454785e24c4cad263ad9e192de7f92464d153431e1653031076ab10f209f1213b29db70134f300342e22a0974d0574bd5c8f96c301cc85a48052a9404bf77a80fd7dde0f989a003a57fc3f931d941eda18ed45aaaeff9113dacf25599792da07b9754fedca90d875aa5dd4787f52aebb6344986f84b939b753aa79905bd0578244ba6345fabe03fb4b2868127c5e598684891d4bfeece27c8a8df61d570214c3a3d6438a562b98e85b9c571e135a9413a06fbc3bf1d5f2acbbeff7d55d3bb7d4137da8e41c767204e5bd846eebad58bfe649fd745795b11fe2e2363ec7eff970c0d7c7979090b0f0dcbdde3b8e10191b9bc4831d1aa091b0758018a0870d7263f10ef0c4a1c48182e7ddd55a323ae96d89f12f46869d19638e7aa9607b9fd2aa95ef6384111c531c4191b1a2b7e18572dc08f491f3c3313295895801a584d342e4179d18e13d18b8551d2b04a208cdefdb525e168431bf043165c2979a443017d5db924ba96ba238d597c5562221583d1bae3ecb7594e3ab7a96394ef871fa956d3083c8a6da2de1a618b9840ce7e65527749811c1e52f9f420e3b3f9d7c91e1a8f2ad76c2f4c6416f7406a853bb4ef11adbaa8df504e6f10c1ea2a230bb1d6dd83a13d72aec4c509796e8a398e75f7ffb9f61c133d0965b11b80d88af15fa43ed9fa9cd77d5c898a067062f2624280f8ba5ca60981c9564e77dde8bf08c1e1bb4f85ba1968b7b953c36371aea8e1036ed05267bc08a78f2d57cfb5a5cfc1c3e8efa410fda78e17100dbe9f7940cd51983dc5946f05b028c4e883bcd6215e956d548c5fbf523eab5dffb76fd24a94b1965d2fd362c2a52445ef0d7122143a8032751349a633167e9ee1308a1072c9a8d3d0a1d83b0d9acb9939696e5f534350adac2bf63be85d901ce2b3d86447d2f5714f40395852c8ebe345f59057b7778d3c3057420abc21f779b71a158c3bc46bacefe9d5c765418a10084ddae4b3db308765ab9751ecd8a814ed09721f4df6670a270a9a89064a3a00b01373483f069942a6ee55c8f47cbe18389da89d708ac8edcfadba8ba6a52432696746d313af7dbd5df20109c30f4e0f13e9be1e694afbe8b71344d8789282785240b9446a25223a485f942e2328f5eb059ebd707a5abf2887c6ea8959b88c463370ab1d78d7d95e15b63f9e7a15bef3a2cc3c9ed8b21851b5865d0ac96e45035f89c0dfaa70d3c286697aefaadad3a12244b194d0aa131f45697cb277c94e66487837430d9c7206c909e2ea003f5ee4b45394ed77aa71103cf54a336ffb87e8b163cd30b27b0037eb20ce4d2ade4e3cb6f640b0e39574426211c08626ad650dd5e193bad03c42c86614a36c8188cee48c5daffcf936acea6a5163f0a0268f527881f9f93ff74d3a136395082ce4649b8b485342c6a458118c280a741aee71dffbeb9780678ea45718a719e9d80abb1b72d4ed818802c02a7805d25258322010fa3d0ccacf3f287f8af586f39d3e9bfce6dd7a47ba6124dc306572d13889d9106bdd28afd01f999822249e68e5e34393b696620d5ff8d093bbbbc0c068d06336d08b8c445fb96e67d770a0c6c183c10867d13768c0addea415ed2582963a072a70d7ea8055949303c4556724408eda5b24e8f278115f35b0cc5e78e89b28044768712ab54c0c17c69c9cb59d711b5986a0213518c564125d66be8390f24e233d4a281854eb64c8ea56acb8f39ca54b473d5ff10683780f13693f4fb1064c22074dfbbc023f4ae45916618d4b4e3143720550e640cb34689d7a4dbbe7d117c8a9911ba00ab954e18869ce33c695116729f91178d245d23b9441ed6e7f2b621bc3684db9a05db88926d60f57bf2a00460e1a6d5d5ac136494f8a247e8c3dd73e4c0f5a25b94d54a4cbca862d674ef6a111ae147a9939980c6846dcaf440d0915acfafc6975bcddb62e86bcc583d0b7e0771f8fa9f58f5ba2257a1c49195944fb14492116a28ee3e82704a91c49aa8b250dc92e4764db15bc1bcaafdfc0dccdd40dccd0056a50eabe4a670bfdf2fe591ba714a40f0268645ecd4cfaa67e0bb61fb90f6001e088992698c7e1ae2e6bc6ef4681fbbde9fffe840d53d25e2fbdea0b94bf75a2ffa2f67fd91d4c2950f06531d65be2e934adb15a204e6194fc47d519f5d5d38199bbcc6c54be489ae5c51f547ea0d1cb83a02e96439a29555973fa1f3c0a8dcb480f879ba2a8e459f008f947a8211849b3d70aa3f4783900f7e6ba53be9013669c510f705db31f2daa70a272c994629cec5da66530f3d4fa4755c0d69dfd4594e227deef241060c6874fc9258881e87ef1787d072e34590e1db6f1c7dbb52b5a7834b7da2c1a000fe657f541e2f1c368d003b3bf188d777b54d2849c91eaf2de178474adde3f6817c4a41f618ba32edd6563217e790627cc65c3628fec32a0e96ebcd6cb353decc06801cdbf868a47c9c28e673e3b86ec63446873f1601d6b7c137d93024863bbf69fbe9746307cb1eeb35ed8a64b389535c478f5ad994885983541c477f7bd03fe0617a15bba160beb46fdce2ad21342d98d34e95c9ea7b926b6e86818ecef521cf1febf415d9cfc934fc11e9a04e1f896603c2a0195a4de1a89fdbc63b95505854e28292c580f775332d1baadebaa6f07fec1394c03e5356d56403f2fceff269a9059bce9cfaf7518d9b4637230127fdff1ea6a8d8ed53b89dba901a3de3e8b18391efdffe24812861cae7e066451988c4dbd9541503c177db624a77e8a9ebadeca4b74954aa5658b18af91ddf4bbeead25cebacc5c880da49a421a4f0535cbab9d1da4daae7bdb9678ca5efc4651870519adfde208a7a0e957a5768f42e4a2360ecf8e80ba8f65d057283aaeccf8427cd36d93a51200821c3f9e1c220e573588331e949cc13e578801999f92c4f163820abc365a6b1b18ec74df2366f1b3c1704554242fde9964a226b56c766cbf4e82dadc0a5401d33ffb364640f8b7510a4887c66e015c778d13c83a58dcb11ae901cd24421e022c90100fff3d0e6b334555cd1d15b8ecd5b0b80d84d782caf7547f0e8b78f9f45d7abd27604f051b156c6fe7eb3113aea61eee61e54cf61b173e82fef371bc90f5afafd72c1fdbba847e42fdf0305fd6b3d904da5d8ad8715e9902338a211292903a47b2f69fb5ee548176fceef4424e4406fe1c174a49835f44e9628ee57f8fdad654cb2fa48b1646616d5d0eefe0d4cc1070ed0a658e1cb960f709926c1f6bac6d7d55ccd618ed34100720f3ce1f49"}, 0x1008) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000180)) 05:58:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000040)=0x400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:37 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xbe71, 0x400) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x7a, "522eec3e1e637c4427ba4002d1ef1ec799ed8998a5fb33e585f5798cacf3cb7eeb34dba0142cd3c8a46f10e3080c30e190bfaec0a8e3c13804c478b55829e47644cac23a7f9cdd41dbd76c3bed8dcc944cec1cb125a613a82eec30635dab059129178442f4cd86c950d4449bfc0f73dc9a003a461a6b139c38d6"}, &(0x7f0000000080)=0x82) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @loopback}}}, 0x84) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:37 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) 05:58:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$unix(r1, &(0x7f0000000000), 0x0, 0x4000, 0x0, 0x0) 05:58:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x2, 0x80000001}}) 05:58:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x42801, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000001c0)=""/238) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x200, @time={r3, r4+10000000}, 0xc20000000000000, {0xfff, 0x9}, 0x8, 0x2, 0x80000000}) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x1000000, 0x80000001}}) 05:58:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x102) sendmsg$nl_route(0xffffffffffffff9c, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnetconf={0x34, 0x52, 0x814, 0x70bd26, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x1f}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffffffffffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000100)={[], 0x2, 0x6, 0x2, 0x0, 0x4, 0x6001, 0xf000, [], 0x8}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) 05:58:37 executing program 4: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) 05:58:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x10000c000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x400062a5, 0x400000000000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) 05:58:37 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x0, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000080)={0x5, 0x7, 0x0, 0x5e}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000001c0)=0x2695) 05:58:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0x280180) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000280)=""/120) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x180, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e21, 0x10001, @mcast2, 0x3}, r3}}, 0x38) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:37 executing program 4: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) 05:58:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x2000000, 0x80000001}}) 05:58:37 executing program 4: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) 05:58:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0xd59f80}}) 05:58:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x800000000003, 0x0, 0x0, 0x7c, 0x0, @stepwise}) 05:58:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x4, [0x8, 0x9, 0x80000001, 0x1f, 0x46, 0x0, 0x4, 0x3, 0x9, 0x3, 0x401, 0x8, 0x9, 0x9, 0x7, 0x6, 0x200, 0x1ff, 0x7d, 0x9, 0xbd6a, 0x8001, 0x3, 0x1c3d, 0x2, 0x8, 0x4, 0x4, 0x6d, 0xdfb, 0x5, 0x101, 0x3, 0x0, 0x4, 0x6, 0x1, 0x7, 0x100, 0xffff, 0xfffffffffffffff7, 0x80000000, 0x200, 0x8, 0x7fff, 0x200, 0x7ff, 0x8], 0x4}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = socket$inet(0x15, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x5}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x3, 0xca, [], 0xc1, &(0x7f0000000480)=[{}, {}, {}], &(0x7f0000000200)=""/202}, &(0x7f0000000380)=0x2f9) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) fcntl$addseals(r2, 0x409, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0xfffffffffffffffd, 0x4f565559, 0x69, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x1, {0x6518, 0x80000000, 0xfffffffffffff8db, 0x942}}) 05:58:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'bridge0\x00', 0x9}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:37 executing program 4: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) [ 2376.848921] divide error: 0000 [#1] PREEMPT SMP KASAN [ 2376.854169] CPU: 0 PID: 16713 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #353 [ 2376.861547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2376.870987] RIP: 0010:vivid_vid_cap_s_dv_timings+0x60e/0x11e0 [ 2376.876888] Code: c6 84 c9 0f 95 c1 40 84 ce 0f 85 ce 0a 00 00 83 e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 0f 85 b9 0a 00 00 48 8b 43 14 31 d2 <41> f7 f7 48 ba 00 00 00 00 00 fc ff df 4c 8d 7b 40 89 85 64 ff ff [ 2376.895804] RSP: 0018:ffff8881849bf628 EFLAGS: 00010246 [ 2376.901175] RAX: 0000000000d59f80 RBX: ffff8881cf2f3100 RCX: 0000000000000001 [ 2376.908450] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881cf2f3114 [ 2376.915719] RBP: ffff8881849bf6e8 R08: 0000000000000001 R09: ffffed10396b6024 [ 2376.922988] R10: ffffed10396b6024 R11: ffff8881cb5b0123 R12: ffff8881cb5b0080 [ 2376.930260] R13: 1ffff11030937ecc R14: 0000000000000000 R15: 0000000000000000 [ 2376.937563] FS: 00007f9cd63dd700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 [ 2376.938994] kobject: 'kvm' (0000000066447023): kobject_uevent_env [ 2376.945787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2376.945806] CR2: 00000000007273ec CR3: 0000000181708000 CR4: 00000000001426f0 [ 2376.945817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2376.945826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2376.945830] Call Trace: [ 2376.945865] ? v4l2_prio_open+0x140/0x140 [ 2376.945882] ? vivid_vid_cap_s_std+0x230/0x230 [ 2376.945902] ? find_held_lock+0x36/0x1c0 [ 2376.983302] kobject: 'kvm' (0000000066447023): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2376.986857] vidioc_s_dv_timings+0xa4/0xc0 [ 2376.986877] v4l_stub_s_dv_timings+0x4f/0x60 [ 2377.004785] kobject: 'kvm' (0000000066447023): kobject_uevent_env [ 2377.008718] __video_do_ioctl+0x8b1/0x1050 [ 2377.008743] ? v4l_s_fmt+0x990/0x990 [ 2377.017674] kobject: 'kvm' (0000000066447023): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2377.019372] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2377.019391] video_usercopy+0x5c1/0x1760 [ 2377.019404] ? v4l_s_fmt+0x990/0x990 [ 2377.019436] ? v4l_enumstd+0x70/0x70 [ 2377.019448] ? rcu_softirq_qs+0x20/0x20 [ 2377.019466] ? find_held_lock+0x36/0x1c0 [ 2377.019482] ? __fget+0x4aa/0x740 [ 2377.019494] ? lock_downgrade+0x900/0x900 [ 2377.019508] ? check_preemption_disabled+0x48/0x280 [ 2377.019527] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2377.019539] ? kasan_check_read+0x11/0x20 [ 2377.019551] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2377.019562] ? rcu_softirq_qs+0x20/0x20 [ 2377.019580] ? __fget+0x4d1/0x740 [ 2377.019596] ? ksys_dup3+0x680/0x680 [ 2377.099456] ? __might_fault+0x12b/0x1e0 [ 2377.103523] ? video_usercopy+0x1760/0x1760 [ 2377.107842] video_ioctl2+0x2c/0x33 [ 2377.111472] v4l2_ioctl+0x154/0x1b0 [ 2377.115093] ? video_devdata+0xa0/0xa0 [ 2377.119102] do_vfs_ioctl+0x1de/0x1790 [ 2377.122988] ? ioctl_preallocate+0x300/0x300 [ 2377.127395] ? __fget_light+0x2e9/0x430 [ 2377.131368] ? fget_raw+0x20/0x20 [ 2377.134829] ? _copy_to_user+0xc8/0x110 [ 2377.138816] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2377.144356] ? put_timespec64+0x10f/0x1b0 [ 2377.148516] ? nsecs_to_jiffies+0x30/0x30 [ 2377.152839] ? do_syscall_64+0x9a/0x820 [ 2377.156820] ? do_syscall_64+0x9a/0x820 [ 2377.160791] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2377.165428] ? security_file_ioctl+0x94/0xc0 [ 2377.169835] ksys_ioctl+0xa9/0xd0 [ 2377.173285] __x64_sys_ioctl+0x73/0xb0 [ 2377.177162] do_syscall_64+0x1b9/0x820 [ 2377.181087] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2377.186441] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2377.191378] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2377.196261] ? trace_hardirqs_on_caller+0x310/0x310 [ 2377.201274] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2377.206305] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2377.211321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2377.216163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2377.221347] RIP: 0033:0x457569 [ 2377.224537] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2377.243429] RSP: 002b:00007f9cd63dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2377.251129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2377.258400] RDX: 0000000020000180 RSI: 00000000c0845657 RDI: 0000000000000003 [ 2377.265657] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2377.272934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9cd63dd6d4 [ 2377.280200] R13: 00000000004c9b30 R14: 00000000004d34f0 R15: 00000000ffffffff [ 2377.287472] Modules linked in: [ 2377.313897] kobject: 'kvm' (0000000066447023): kobject_uevent_env [ 2377.320826] kobject: 'kvm' (0000000066447023): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2377.331920] kobject: 'loop2' (0000000090b5268f): kobject_uevent_env [ 2377.334470] ---[ end trace 44954a6a35a38f81 ]--- [ 2377.343599] RIP: 0010:vivid_vid_cap_s_dv_timings+0x60e/0x11e0 [ 2377.349012] kobject: 'loop2' (0000000090b5268f): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:58:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) mount$9p_xen(&(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={'trans=xen,', {[{@msize={'msize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, "26a4"}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x5a0c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x4) write(r4, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240202000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x800000000000000, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) 05:58:38 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x2, 0x84) sendto$inet6(r1, &(0x7f000087dffe)="80", 0x1, 0x20000000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000340)={0x8ac}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x15, 0x1, 0x14000, "2030958cbd2f3ed6b2d60fbff9886214"}, 0x15, 0x1) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080)="53af4f44a602d62d2848f6c7a6ed04e0bb56e15f89448f166b01767a8b43b3e6036483af917df8ae5c7746a3ea7e", &(0x7f00000000c0)=""/43}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:58:38 executing program 4: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) [ 2377.350259] Code: c6 84 c9 0f 95 c1 40 84 ce 0f 85 ce 0a 00 00 83 e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 0f 85 b9 0a 00 00 48 8b 43 14 31 d2 <41> f7 f7 48 ba 00 00 00 00 00 fc ff df 4c 8d 7b 40 89 85 64 ff ff [ 2377.368810] kobject: 'loop4' (0000000008fef2fa): kobject_uevent_env [ 2377.381841] RSP: 0018:ffff8881849bf628 EFLAGS: 00010246 [ 2377.394571] RAX: 0000000000d59f80 RBX: ffff8881cf2f3100 RCX: 0000000000000001 [ 2377.403121] kobject: 'loop4' (0000000008fef2fa): fill_kobj_path: path = '/devices/virtual/block/loop4' 05:58:38 executing program 4: r0 = syz_open_dev$video(0x0, 0x6287, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x1000000, 0x0, 0x0, 0x80000001}}) [ 2377.405883] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881cf2f3114 [ 2377.428419] kobject: 'loop0' (000000005f1ff41d): kobject_uevent_env [ 2377.454004] kobject: 'loop0' (000000005f1ff41d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2377.468924] RBP: ffff8881849bf6e8 R08: 0000000000000001 R09: ffffed10396b6024 [ 2377.480336] ------------[ cut here ]------------ [ 2377.485088] downgrading a read lock [ 2377.485165] WARNING: CPU: 0 PID: 7616 at kernel/locking/lockdep.c:3556 lock_downgrade+0x4d7/0x900 [ 2377.497825] Kernel panic - not syncing: panic_on_warn set ... [ 2377.502365] R10: ffffed10396b6024 R11: ffff8881cb5b0123 R12: ffff8881cb5b0080 [ 2377.504809] Kernel Offset: disabled [ 2377.515689] Rebooting in 86400 seconds..