&(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:27:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1004, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) dup(0xffffffffffffffff) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000340)={0x7, 0x2, 0x1}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x96000, 0x2, 0x11, r3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000080)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) splice(r2, &(0x7f0000000040)=0x7, r4, &(0x7f0000000180)=0x7f, 0x1, 0x5) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000240)={0x9, 0x8, 0x3, {0x1, @vbi={0xda, 0x0, 0x9, 0x33363248, [0x401, 0x6], [0x7, 0x100], 0x2}}, 0xe3e}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000440)={0xffff, 0x1, 0x4, 0x400, 0x66c7, {}, {0x0, 0x0, 0xf4, 0x6, 0x2, 0x80, "c23fcba4"}, 0x4, 0x1, @fd}) [ 1268.217473][T30524] binder: 30522:30524 unknown command 0 [ 1268.223171][T30524] binder: 30522:30524 ioctl c0306201 200001c0 returned -22 08:27:56 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000480)={0xb, @win={{0x4, 0x112, 0x6, 0x8370}, 0x8, 0xfffffffd, &(0x7f00000001c0)={{0x2, 0x6, 0x8001, 0x9}, &(0x7f0000000180)={{0x5, 0x8001, 0x1000, 0x200}, &(0x7f0000000100)={{0xfe, 0x423d, 0x1f, 0x5}}}}, 0x2, &(0x7f0000000340)="5f2e1a69c1c15d071ea9d9a65cfe41a5d0c06e8a4c75b6bccb2fb3acd0b71255d258b66b53b7c4cf76c2aa7fac8df70cef142dc72077785fe580d52f", 0x8}}) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:27:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40046307, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:27:56 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r1, 0x0, r3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 08:27:56 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1270.425535][T30546] binder: 30545:30546 unknown command 0 [ 1270.431193][T30546] binder: 30545:30546 ioctl c0306201 200001c0 returned -22 [ 1270.634098][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.641991][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.686369][T28550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:27:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40086303, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1277.402957][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1277.409425][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 08:28:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4008630a, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1277.873666][T30556] binder: 30554:30556 unknown command 0 [ 1277.879362][T30556] binder: 30554:30556 ioctl c0306201 200001c0 returned -22 08:28:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40086310, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1278.785436][T30563] binder: 30558:30563 unknown command 0 [ 1278.791166][T30563] binder: 30558:30563 ioctl c0306201 200001c0 returned -22 [ 1279.161378][T30570] binder: 30568:30570 unknown command 0 [ 1279.167169][T30570] binder: 30568:30570 ioctl c0306201 200001c0 returned -22 08:28:04 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0600"}, 0x0, 0x2, @planes=&(0x7f0000000080)={0x0, 0x6, @userptr}, 0x40001f}) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettaction={0x78, 0x32, 0x111, 0x70bd2a, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe02b}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d90}}]}]}, 0x78}}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xfffffffd, 0x4) poll(0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000480)={&(0x7f0000000380)=""/166, 0xa6, 0x7c, 0x5}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r4, r3, 0x0, 0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000540)={0xfff, 0x829, 0x0, {0x1, @win={{0x10000, 0x62c}, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)}}, 0x1}) 08:28:05 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:07 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000380)=@framed={{0x7a}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0x80, 0x8, {{0x11, 0x4, 0x0, 0x3c, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x18, 0x1, [{0x0, 0x12, "216fe19fe0ee8673eb75bcde2704328f"}]}, @ssrr={0x89, 0x17, 0xd4, [@empty, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}]}]}}}}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r3, r2, 0x0, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x3, 0x2, 0x8, 0x7, 0x50}, @call={0x85, 0x0, 0x0, 0xb0}, @generic={0x9, 0x9, 0x8, 0x20, 0x3ff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x1a, '\x00', r1, 0x17, r2, 0x8, &(0x7f0000000200)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x3, 0x0, 0x1}, 0x10, 0x1f9f2, r0}, 0x78) 08:28:11 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000480)={0x3, @vbi={0xb, 0xc2f4, 0x4, 0x4c47504a, [0x80, 0x7ff], [0x5, 0xffff], 0x13a}}) 08:28:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:11 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r1, 0x0, r3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 08:28:11 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0600"}, 0x0, 0x2, @planes=&(0x7f0000000080)={0x0, 0x6, @userptr}, 0x40001f}) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettaction={0x78, 0x32, 0x111, 0x70bd2a, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe02b}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d90}}]}]}, 0x78}}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xfffffffd, 0x4) poll(0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000480)={&(0x7f0000000380)=""/166, 0xa6, 0x7c, 0x5}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r4, r3, 0x0, 0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000540)={0xfff, 0x829, 0x0, {0x1, @win={{0x10000, 0x62c}, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)}}, 0x1}) 08:28:11 executing program 5: r0 = syz_usb_connect(0x0, 0x581, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x33, 0x16, 0x83, 0x40, 0x1b3d, 0x162, 0x98ff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x56f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0x0, 0xf, 0x8f, 0xc7, 0x5, 0x0, [], [{{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x7f, 0xeb}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0xf2, 0xff, 0xe, [@generic={0x34, 0xa, "22eafd84958b83770e1a374699a7a17223f5ed38ec09d6effbeb6aac2fbd5df9e45a23dd3e8d1fe6df2237f5dfac72ddf07d"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x0, 0x0, 0x0, [@generic={0x5b, 0x9, "09fe2136a62272099bf0cdc386f16ad9cb6e18d6e7aaa3909dd5aa31a927395618c4e428abf9f451f5454cfad4e64162c9be2e24ee963d11f544ceb2403ae346c9e5b6d04f240485435ec1b46d086acd10f6dcfcc2c06456ad"}, @generic={0x77, 0x31, "ed66b32564819ddf5633d19b8634290ce1f1b5287c5a3bb2094cbe8a7bb7bd6e21c7508cb2dfd9a79735a461ec2ce8546f588304dd03df7466d2679dbb58f9c99f01403fc3c77c4eac2af8f82e67f125a14da84c478c50fa0ce13952a93e7055ba992e77fd00"/117}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x72, 0x5, 0x6d, [@generic={0x3c, 0x6, "c7c8b2f6a3e61769b375085dfbc8fc52f37b22805793812c1e0d2f8f5a762fa81ba4044797ca6f45e24fd758b22f81ba3632c154f2e8979dc6bf"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x40, 0x0, 0x36}}, {{0x9, 0x5, 0x85, 0x0, 0x400, 0x8, 0x48, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x20}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x7f, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x40}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xa2, 0xe6, 0x3}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0x1f, 0x7, [@generic={0xf7, 0x0, "8aa9b4cd0a4b3fc111db2db11055e82c52e901e95bc96a1d6cc13fb1e97b0613ea7d536d353a8be369cec04ef1552cc7d572bb39136b6c28ba6a318de4094ad68c52884832140e38735157a485a7136d71bbdc0f1bc06c195bee5ae120b692fb891d062300e6b3c86c5ac8fc5c31854a336e991aebe4f67a316ea0e181edacc473acd736dc86a2547d62fa414c0ee587ccc3fca1635c7d0b59e6e622498896c548357958d71381885dc17b732baf27e7455e1ccf51be5658fb2bafc2338e2ac9bd31e0cb65a21224f7894e0fad053ad233692d056f455eccbc0fe1033a4e8ad5625741ce8d58a5d3e3ebe73e6af641641c141a9507"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xdb, 0x1}, @generic={0xf2, 0x30, "25b79a383d9faca589b91ac87fd5094b1f6ef706b869cb81bfbf2bca0a808f5a488ca15269e7e8a9f506c4d25010e50bb11e8aba0a198e040f356e0ecf8a3e41c3addd1a78ee4f45ec72b9c621c8042e4a93dba0ab4c348a3779b528d04cac38e963c80c67a0f8fde78280b007c73e75b8a21a57df9ee2dcf7391258da037e9635bf179492195445f0457aca864031660569af7a1c5ba03964d7380fabad080a9c4ce3b74a79b3b4dccc0ccd04a5fcf15030a2984bfff0044b8e99e943b995e77563ba53e456a2d50ae1b2c4873f1fd9698c95b240b933c5af7fed1dd6a07226e539a8baa462bfe06de843bc5933733d"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x2, 0x69, 0xe7, [@generic={0x98, 0x31, "530593a9a1c617d2c22c9955ecc28bad77d92e040741c6e55e0cb4e249f28a10339fbb91dd9b50a71c8c4b3bcb5f01bb57f836576999f55cad84ec8e03f4f5632f6ac527fc5b53e89719532a910178fb5faa35ee3b3bb8d5f3549456f170eace8a390ac8e21cd676e809f9bedc86b14f4eb31521739a6f98f1231af8b549ab50ce0e4c9dcb6df4fad36032acd74ee0ea6cd27153fa8f"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x40, 0x7, 0x4, [@generic={0xe0, 0x23, "9d6ded671e3f5b0a9c9ac1a7372b0809def0e11b0a0d9bbd6f95f6ca2110e86bee338d899e9fc90f22fb4698355e5afa45d3ada38ded22e0ab6e32acae3f18644feae152ef5a16bf7a04a05e3972ef576b464c0213682028b13335c71dcbdfb0a143ce2fab02b95c353e41ac3da210a0eabccbd961b6419ec5d90c31b6d6b4c0792caff6c9e334e17f35b81b1347bd292eb09a7f1c4a3345fc05a773578e1f0b935d8338bb8b743f6fca95016195a6fe3dd919e0d44e0c5ad8c828879573c404d86b8bc184bcc1e5acb1db3345ce3e92e7058e98c288d56e65d09b3f8dae"}, @generic={0xe, 0x11, "fa419fa7c88de60417546430"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0xa, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x6, 0x1e1, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x1b, 0x64, 0x8b, 0x8, 0x162e, 0xba41, 0x1dff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1cf, 0x2, 0x0, 0xff, 0x3c56c75243d688d0, 0x7f, [{{0x9, 0x4, 0x7f, 0x5, 0x1, 0xff, 0x5d, 0x81, 0x4, [], [{{0x9, 0x5, 0x80, 0x4, 0x210, 0x0, 0x3, 0x3, [@generic={0xdc, 0x8, "0e77856d79cf285fb5dc89c8ed31bb55d035b347a39fecadaee84dad374fad8c7c684660a39306459c08bb46b63f53b3661fd27d23e2b1f607b326f4d0ccd510265463870da0131c9da5114ca22bd457dab05a88f5196f1c989e9d86a92b24260318317293930058cd784f447735196aca68c79bf4e6de6212bc340d37df03b574997c755c656aa38270de5022c8a865a65548583f494b35e91aad04d4d4a1feac0470b17872285b40559ed242518ead6456f69cd643d7fb30f9579bc67946141b6aa735684bb2aab3a78fd4b919e3d8dfb69866b929ffd9d246"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x20}]}}]}}, {{0x9, 0x4, 0x27, 0xcf, 0x4, 0xd8, 0x5e, 0xf1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x80}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0xd93, 0x81, "569f"}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x3, "cb"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x9}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x20, 'n'}]}], [{{0x9, 0x5, 0xf, 0x1, 0x7ff, 0x0, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x6, 0x8, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x81}, @generic={0x5e, 0xb, "c89ba112c78adeeb8ebb16755c001c61b0ddb83c354ea224647ff0568c965e916a482ac0a1af2371488cefa8a000ed4d7d8f1e71f590baf5df5449c9a4d88b02523c20c2fe6b0f62efed2c438c12cfc4ed0bd9a15c9fc2a2736f257a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0xda}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xa7, 0xe4, 0xc1}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x7, 0x1, 0x40, 0x20, 0x80}, 0xa9, &(0x7f0000001700)={0x5, 0xf, 0xa9, 0x2, [@generic={0x99, 0x10, 0xb, "73f143e2d462b2e9f37acbf5778460de0a046cf2b6c59731bb6dc70c358d9f37418620c155280c39a451326711f63f61392918ecaaf12eaef8769b4d7aa6d5365d8e3805540ee2752a4ae5f9b011208837f01ea28ddfad4887b7ffd235a4ce312c5fc7766a712d5f561e44d5be5e3a73df0b60538b878f7ee92837e0886ee40aca65db1dca3ee6561db69022ca9d0f7f739df38c490c"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x60, 0x8, 0x8, 0x0, 0x7f}]}, 0xa, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xe4f5}}, {0x35, &(0x7f00000005c0)=@string={0x35, 0x3, "30f965aa2e93d70b8aaf0f04f404cf54c6323e2483a6da01b43720bccba5585baafb13a257e25376f8057d9c5bfc48d70393a4"}}, {0x81, &(0x7f0000000e00)=@string={0x81, 0x3, "c3d63954fe969dc491548b4f6b4c2c816e266865334c0df44e04e6d36a8e40c87bd3c50cf9247989eeece5abe84545231799995dc0757f274eb95cafe283dfb035ef04052e233fcb33ada3a232b125b27f70b630787def6b4b54a88f6720ce05602f46acea80c0b62c4aa0bdd6ae81295349680bf31fdd7d4f563c94ed00fb"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x860}}, {0x2a, &(0x7f0000000540)=@string={0x2a, 0x3, "aadac4c2ac5fad4c5f6f7e58cba3f0ced6e36ad3624df66f9010840c9b766251576e29d6507f3118"}}, {0xd4, &(0x7f00000017c0)=@string={0xd4, 0x3, "692557a02f50e62cd57ea6836b73d1970b0ee732bdabeab30e5b46443e6dd388d4aa5ded46a9603c0568e7550af7c4cdb5493aa47fcbcca4fb315c0990b4355b1a171cd928179e6eb4890a5c7d99b08ab1cbd686c1b7497a759f0eef8e3fbdc29c772303cdadb742bc1d7cb87896d4bf9189c74d9b69b69ffcc210956fef596c0584475ed307baa7f63f5922ca6514b996d90ac2e91260db949958443d6f0e8979ac04ad0e1eb0f50b03518dd0f61dcf66cfcc996c8e905d35b3f5896bef29bbf5912e0cd3fece51aa145ec1361823567e1b"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x4a14}}]}) syz_usb_control_io(r1, &(0x7f0000001200)={0x2c, &(0x7f0000000fc0)={0x20, 0x23, 0x67, {0x67, 0xf, "65d50166018a8109cc3f215fea6bc1f2656ea83552c53e22aacc4f495c2cea8996ab26836e30d07dbf44a9345dd334d8337d81d41710b5c53e9d38e066d3c24dd35ac37d4f8bed4cbe72f52ab0de08dae31fcf4265f4aaf850f46559cfb52d74a9f9c35b36"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000001080)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x3, [@generic={0x5, 0x10, 0xa, "c629"}, @generic={0xbb, 0x10, 0x2, "81f0c02cacd58ff016ad5e487ace849149220c15862967a7291bfa8a6aa9a307f026f41f06e9707979fd5e05f4283d2597a5061c70bd5b511f9833eda60506c93a5b08037f41a76c17a6fb7682bef28d72d2bfba45adc205ecfc5d9851f49879c474653d1b377954667e67a2b5fd618f2cce5530e95c9a7a5fd9ed369a2b4e23ed28268d77e497a1f7dc198b7dd1b82b664978ba8b744d979e5ccf83715ff718a36f48f6a1eca53f74b2edad3a078e2eb0da0e7f683e15aa"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0xd, 0x7}]}}, &(0x7f0000001180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0xff, 0x1, "a942932b", "701a66fa"}}, &(0x7f00000011c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x10, 0x8, 0x80, 0x9, 0x6, 0x3976}}}, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x40, 0x14, 0x1a, "7031257a4980fd4d0162ae21a44b233df70a7c15e48f3edf6bb7"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f0000001380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000013c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001400)={0x40, 0xb, 0x2, "0448"}, &(0x7f0000001440)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001480)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000014c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001500)={0x40, 0x19, 0x2, "928a"}, &(0x7f0000001540)={0x40, 0x1a, 0x2, 0xa7e}, &(0x7f0000001580)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000015c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001600)={0x40, 0x21, 0x1, 0x8b}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x84, {0x9, 0x21, 0x101, 0x1f, 0x1, {0x22, 0x946}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0xf7, 0xe0, 0x20, 0x81}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "b01283b35480ceba55a5d8a40841dcf5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x3, 0x2}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="2f0336bd21d0745c8bf2215c850836ceacd7712c10c179ec6cef62aac3c449d9800e00"/47]}]}) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f00000001c0)={0x0, 0x3, 0x6, {0x6, 0xe, "8cdbe1a8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000240)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x2, "27228b8a"}, @local=@item_4={0x3, 0x2, 0x4, "9be0e0b5"}, @global, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x5, "393d40ee"}, @main=@item_012={0x1, 0x0, 0xc, 'p'}, @global=@item_4={0x3, 0x1, 0xb, "814939ae"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfd3}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x15, 0x19, "b588bb91cc1155b5de2f4c62e3107f352afbe57c4a2b8077e4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0x80, "a0c7625dddbcbc04b4e673d866a5bdded76d37d89a15d0fcca1dc30a7087f62da14a8e3fc43c0518b91e76c69ba997cd799ded75e14d18819058990ee235fc0bdac1afdbcc01a585ba8bf95dbcae54b45ab6b10768f3c9776a61cc2db064ee3c557253347cd50c5d56fa7800ae57537d2c549a6498db5310931714733e8db993"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, 0x0) [ 1285.970509][T30611] binder: 30606:30611 unknown command 0 [ 1285.976332][T30611] binder: 30606:30611 ioctl c0306201 200001c0 returned -22 [ 1286.092246][T26895] usb 6-1: new high-speed USB device number 30 using dummy_hcd 08:28:12 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40106308, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1286.383214][T30620] binder: 30618:30620 unknown command 0 [ 1286.388885][T30620] binder: 30618:30620 ioctl c0306201 200001c0 returned -22 08:28:12 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1286.453432][T26895] usb 6-1: config 0 has an invalid interface number: 218 but max is 0 [ 1286.461719][T26895] usb 6-1: config 0 has no interface number 0 [ 1286.468084][T26895] usb 6-1: config 0 interface 218 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1286.478864][T26895] usb 6-1: config 0 interface 218 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1286.489922][T26895] usb 6-1: config 0 interface 218 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1286.500700][T26895] usb 6-1: config 0 interface 218 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1286.512069][T26895] usb 6-1: config 0 interface 218 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1286.523311][T26895] usb 6-1: config 0 interface 218 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1286.534291][T26895] usb 6-1: config 0 interface 218 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 1286.544255][T26895] usb 6-1: config 0 interface 218 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 1286.555005][T26895] usb 6-1: config 0 interface 218 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1286.565860][T26895] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0162, bcdDevice=98.ff [ 1286.574955][T26895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:28:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40106309, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:12 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x400002, 0x0) r1 = dup(r0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0xf4, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x5e210, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001}, 0x0, 0x0, r1, 0x9) sendfile(r0, r1, 0x0, 0x80006) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x6, 0x1, 0x9d, 0x1, 0x0, 0x9, 0x60100, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0x8001}, 0x2, 0x7, 0x1df, 0x6, 0xdc8, 0x3, 0xfff9, 0x0, 0xffff, 0x0, 0x5}, 0x0, 0xb, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r3, 0x39, 0x0, 0x6, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000080)) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000840)=""/108, 0x6c}], 0x1}, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x1ff, @empty, 0x4}, 0x1c) r5 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r5, 0x39, 0x0, 0x6, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x7, r5, &(0x7f00000002c0)="7adc696eb12a222e8539a71ea2cccec3866f1e3962e8096f193da29aeb215867583dc7123b54b0dbc436bd16ef5e929f2b0fccab0c0c506b6e4be6c6c2f4d188558e7f4816061838a866a1862ce028cde5568a12bdd3e97af3b92c9c91d2b4109d3cc465903c3f43f8fdbe74821a8ad6d57c8e35b472360f6585d49c3151eb9d17d3b93d09b752f083e32b1671ac59be", 0x90, 0x3, 0x0, 0x2}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) [ 1286.777944][T30627] binder: 30625:30627 unknown command 0 [ 1286.783833][T30627] binder: 30625:30627 ioctl c0306201 200001c0 returned -22 08:28:12 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:13 executing program 2: r0 = syz_io_uring_setup(0xeb7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x12d}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) fallocate(r6, 0x6c, 0x80000001, 0x5) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1288.105701][T26895] usb 6-1: config 0 descriptor?? [ 1288.200326][T26895] ftdi_sio 6-1:0.218: FTDI USB Serial Device converter detected [ 1288.209132][T26895] usb 6-1: Detected FT-X [ 1288.220505][T30643] binder: 30637:30643 unknown command 0 [ 1288.226382][T30643] binder: 30637:30643 ioctl c0306201 200001c0 returned -22 [ 1288.432920][T26895] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1288.677773][T30602] UDC core: couldn't find an available UDC or it's busy: -16 [ 1288.685475][T30602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1288.716640][T26895] ftdi_sio 6-1:0.218: GPIO initialisation failed: -71 08:28:14 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 08:28:14 executing program 4: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40406301, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1288.739631][T26895] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1288.763007][T26895] usb 6-1: USB disconnect, device number 30 [ 1288.854814][T30660] binder: 30658:30660 unknown command 0 [ 1288.856651][T26895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1288.860444][T30660] binder: 30658:30660 ioctl c0306201 200001c0 returned -22 [ 1288.870446][T26895] ftdi_sio 6-1:0.218: device disconnected [ 1289.089438][T25195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.097567][T25195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.108163][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1289.582551][T26895] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1289.962820][T26895] usb 6-1: config 0 has an invalid interface number: 218 but max is 0 [ 1289.971056][T26895] usb 6-1: config 0 has no interface number 0 [ 1289.977234][T26895] usb 6-1: config 0 interface 218 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1289.988017][T26895] usb 6-1: config 0 interface 218 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1289.999192][T26895] usb 6-1: config 0 interface 218 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1290.010066][T26895] usb 6-1: config 0 interface 218 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1290.021117][T26895] usb 6-1: config 0 interface 218 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1290.032237][T26895] usb 6-1: config 0 interface 218 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1290.043125][T26895] usb 6-1: config 0 interface 218 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 1290.053229][T26895] usb 6-1: config 0 interface 218 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 1290.064006][T26895] usb 6-1: config 0 interface 218 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1290.074882][T26895] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0162, bcdDevice=98.ff [ 1290.083990][T26895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.097361][T26895] usb 6-1: config 0 descriptor?? [ 1290.144074][T26895] ftdi_sio 6-1:0.218: FTDI USB Serial Device converter detected [ 1290.152646][T26895] usb 6-1: Detected FT-X 08:28:16 executing program 5: r0 = syz_usb_connect(0x0, 0x581, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x33, 0x16, 0x83, 0x40, 0x1b3d, 0x162, 0x98ff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x56f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0x0, 0xf, 0x8f, 0xc7, 0x5, 0x0, [], [{{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x7f, 0xeb}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0xf2, 0xff, 0xe, [@generic={0x34, 0xa, "22eafd84958b83770e1a374699a7a17223f5ed38ec09d6effbeb6aac2fbd5df9e45a23dd3e8d1fe6df2237f5dfac72ddf07d"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x0, 0x0, 0x0, [@generic={0x5b, 0x9, "09fe2136a62272099bf0cdc386f16ad9cb6e18d6e7aaa3909dd5aa31a927395618c4e428abf9f451f5454cfad4e64162c9be2e24ee963d11f544ceb2403ae346c9e5b6d04f240485435ec1b46d086acd10f6dcfcc2c06456ad"}, @generic={0x77, 0x31, "ed66b32564819ddf5633d19b8634290ce1f1b5287c5a3bb2094cbe8a7bb7bd6e21c7508cb2dfd9a79735a461ec2ce8546f588304dd03df7466d2679dbb58f9c99f01403fc3c77c4eac2af8f82e67f125a14da84c478c50fa0ce13952a93e7055ba992e77fd00"/117}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x72, 0x5, 0x6d, [@generic={0x3c, 0x6, "c7c8b2f6a3e61769b375085dfbc8fc52f37b22805793812c1e0d2f8f5a762fa81ba4044797ca6f45e24fd758b22f81ba3632c154f2e8979dc6bf"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x40, 0x0, 0x36}}, {{0x9, 0x5, 0x85, 0x0, 0x400, 0x8, 0x48, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x20}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x7f, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x40}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xa2, 0xe6, 0x3}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0x1f, 0x7, [@generic={0xf7, 0x0, "8aa9b4cd0a4b3fc111db2db11055e82c52e901e95bc96a1d6cc13fb1e97b0613ea7d536d353a8be369cec04ef1552cc7d572bb39136b6c28ba6a318de4094ad68c52884832140e38735157a485a7136d71bbdc0f1bc06c195bee5ae120b692fb891d062300e6b3c86c5ac8fc5c31854a336e991aebe4f67a316ea0e181edacc473acd736dc86a2547d62fa414c0ee587ccc3fca1635c7d0b59e6e622498896c548357958d71381885dc17b732baf27e7455e1ccf51be5658fb2bafc2338e2ac9bd31e0cb65a21224f7894e0fad053ad233692d056f455eccbc0fe1033a4e8ad5625741ce8d58a5d3e3ebe73e6af641641c141a9507"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xdb, 0x1}, @generic={0xf2, 0x30, "25b79a383d9faca589b91ac87fd5094b1f6ef706b869cb81bfbf2bca0a808f5a488ca15269e7e8a9f506c4d25010e50bb11e8aba0a198e040f356e0ecf8a3e41c3addd1a78ee4f45ec72b9c621c8042e4a93dba0ab4c348a3779b528d04cac38e963c80c67a0f8fde78280b007c73e75b8a21a57df9ee2dcf7391258da037e9635bf179492195445f0457aca864031660569af7a1c5ba03964d7380fabad080a9c4ce3b74a79b3b4dccc0ccd04a5fcf15030a2984bfff0044b8e99e943b995e77563ba53e456a2d50ae1b2c4873f1fd9698c95b240b933c5af7fed1dd6a07226e539a8baa462bfe06de843bc5933733d"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x2, 0x69, 0xe7, [@generic={0x98, 0x31, "530593a9a1c617d2c22c9955ecc28bad77d92e040741c6e55e0cb4e249f28a10339fbb91dd9b50a71c8c4b3bcb5f01bb57f836576999f55cad84ec8e03f4f5632f6ac527fc5b53e89719532a910178fb5faa35ee3b3bb8d5f3549456f170eace8a390ac8e21cd676e809f9bedc86b14f4eb31521739a6f98f1231af8b549ab50ce0e4c9dcb6df4fad36032acd74ee0ea6cd27153fa8f"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x40, 0x7, 0x4, [@generic={0xe0, 0x23, "9d6ded671e3f5b0a9c9ac1a7372b0809def0e11b0a0d9bbd6f95f6ca2110e86bee338d899e9fc90f22fb4698355e5afa45d3ada38ded22e0ab6e32acae3f18644feae152ef5a16bf7a04a05e3972ef576b464c0213682028b13335c71dcbdfb0a143ce2fab02b95c353e41ac3da210a0eabccbd961b6419ec5d90c31b6d6b4c0792caff6c9e334e17f35b81b1347bd292eb09a7f1c4a3345fc05a773578e1f0b935d8338bb8b743f6fca95016195a6fe3dd919e0d44e0c5ad8c828879573c404d86b8bc184bcc1e5acb1db3345ce3e92e7058e98c288d56e65d09b3f8dae"}, @generic={0xe, 0x11, "fa419fa7c88de60417546430"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0xa, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x6, 0x1e1, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x1b, 0x64, 0x8b, 0x8, 0x162e, 0xba41, 0x1dff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1cf, 0x2, 0x0, 0xff, 0x3c56c75243d688d0, 0x7f, [{{0x9, 0x4, 0x7f, 0x5, 0x1, 0xff, 0x5d, 0x81, 0x4, [], [{{0x9, 0x5, 0x80, 0x4, 0x210, 0x0, 0x3, 0x3, [@generic={0xdc, 0x8, "0e77856d79cf285fb5dc89c8ed31bb55d035b347a39fecadaee84dad374fad8c7c684660a39306459c08bb46b63f53b3661fd27d23e2b1f607b326f4d0ccd510265463870da0131c9da5114ca22bd457dab05a88f5196f1c989e9d86a92b24260318317293930058cd784f447735196aca68c79bf4e6de6212bc340d37df03b574997c755c656aa38270de5022c8a865a65548583f494b35e91aad04d4d4a1feac0470b17872285b40559ed242518ead6456f69cd643d7fb30f9579bc67946141b6aa735684bb2aab3a78fd4b919e3d8dfb69866b929ffd9d246"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x20}]}}]}}, {{0x9, 0x4, 0x27, 0xcf, 0x4, 0xd8, 0x5e, 0xf1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x80}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0xd93, 0x81, "569f"}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x3, "cb"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x9}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x20, 'n'}]}], [{{0x9, 0x5, 0xf, 0x1, 0x7ff, 0x0, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x6, 0x8, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x81}, @generic={0x5e, 0xb, "c89ba112c78adeeb8ebb16755c001c61b0ddb83c354ea224647ff0568c965e916a482ac0a1af2371488cefa8a000ed4d7d8f1e71f590baf5df5449c9a4d88b02523c20c2fe6b0f62efed2c438c12cfc4ed0bd9a15c9fc2a2736f257a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0xda}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xa7, 0xe4, 0xc1}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x7, 0x1, 0x40, 0x20, 0x80}, 0xa9, &(0x7f0000001700)={0x5, 0xf, 0xa9, 0x2, [@generic={0x99, 0x10, 0xb, "73f143e2d462b2e9f37acbf5778460de0a046cf2b6c59731bb6dc70c358d9f37418620c155280c39a451326711f63f61392918ecaaf12eaef8769b4d7aa6d5365d8e3805540ee2752a4ae5f9b011208837f01ea28ddfad4887b7ffd235a4ce312c5fc7766a712d5f561e44d5be5e3a73df0b60538b878f7ee92837e0886ee40aca65db1dca3ee6561db69022ca9d0f7f739df38c490c"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x60, 0x8, 0x8, 0x0, 0x7f}]}, 0xa, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xe4f5}}, {0x35, &(0x7f00000005c0)=@string={0x35, 0x3, "30f965aa2e93d70b8aaf0f04f404cf54c6323e2483a6da01b43720bccba5585baafb13a257e25376f8057d9c5bfc48d70393a4"}}, {0x81, &(0x7f0000000e00)=@string={0x81, 0x3, "c3d63954fe969dc491548b4f6b4c2c816e266865334c0df44e04e6d36a8e40c87bd3c50cf9247989eeece5abe84545231799995dc0757f274eb95cafe283dfb035ef04052e233fcb33ada3a232b125b27f70b630787def6b4b54a88f6720ce05602f46acea80c0b62c4aa0bdd6ae81295349680bf31fdd7d4f563c94ed00fb"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x860}}, {0x2a, &(0x7f0000000540)=@string={0x2a, 0x3, "aadac4c2ac5fad4c5f6f7e58cba3f0ced6e36ad3624df66f9010840c9b766251576e29d6507f3118"}}, {0xd4, &(0x7f00000017c0)=@string={0xd4, 0x3, "692557a02f50e62cd57ea6836b73d1970b0ee732bdabeab30e5b46443e6dd388d4aa5ded46a9603c0568e7550af7c4cdb5493aa47fcbcca4fb315c0990b4355b1a171cd928179e6eb4890a5c7d99b08ab1cbd686c1b7497a759f0eef8e3fbdc29c772303cdadb742bc1d7cb87896d4bf9189c74d9b69b69ffcc210956fef596c0584475ed307baa7f63f5922ca6514b996d90ac2e91260db949958443d6f0e8979ac04ad0e1eb0f50b03518dd0f61dcf66cfcc996c8e905d35b3f5896bef29bbf5912e0cd3fece51aa145ec1361823567e1b"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x4a14}}]}) syz_usb_control_io(r1, &(0x7f0000001200)={0x2c, &(0x7f0000000fc0)={0x20, 0x23, 0x67, {0x67, 0xf, "65d50166018a8109cc3f215fea6bc1f2656ea83552c53e22aacc4f495c2cea8996ab26836e30d07dbf44a9345dd334d8337d81d41710b5c53e9d38e066d3c24dd35ac37d4f8bed4cbe72f52ab0de08dae31fcf4265f4aaf850f46559cfb52d74a9f9c35b36"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000001080)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x3, [@generic={0x5, 0x10, 0xa, "c629"}, @generic={0xbb, 0x10, 0x2, "81f0c02cacd58ff016ad5e487ace849149220c15862967a7291bfa8a6aa9a307f026f41f06e9707979fd5e05f4283d2597a5061c70bd5b511f9833eda60506c93a5b08037f41a76c17a6fb7682bef28d72d2bfba45adc205ecfc5d9851f49879c474653d1b377954667e67a2b5fd618f2cce5530e95c9a7a5fd9ed369a2b4e23ed28268d77e497a1f7dc198b7dd1b82b664978ba8b744d979e5ccf83715ff718a36f48f6a1eca53f74b2edad3a078e2eb0da0e7f683e15aa"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0xd, 0x7}]}}, &(0x7f0000001180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0xff, 0x1, "a942932b", "701a66fa"}}, &(0x7f00000011c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x10, 0x8, 0x80, 0x9, 0x6, 0x3976}}}, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x40, 0x14, 0x1a, "7031257a4980fd4d0162ae21a44b233df70a7c15e48f3edf6bb7"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f0000001380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000013c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001400)={0x40, 0xb, 0x2, "0448"}, &(0x7f0000001440)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001480)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000014c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001500)={0x40, 0x19, 0x2, "928a"}, &(0x7f0000001540)={0x40, 0x1a, 0x2, 0xa7e}, &(0x7f0000001580)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000015c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001600)={0x40, 0x21, 0x1, 0x8b}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x84, {0x9, 0x21, 0x101, 0x1f, 0x1, {0x22, 0x946}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0xf7, 0xe0, 0x20, 0x81}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "b01283b35480ceba55a5d8a40841dcf5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x3, 0x2}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="2f0336bd21d0745c8bf2215c850836ceacd7712c10c179ec6cef62aac3c449d9800e00"/47]}]}) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f00000001c0)={0x0, 0x3, 0x6, {0x6, 0xe, "8cdbe1a8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000240)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x2, "27228b8a"}, @local=@item_4={0x3, 0x2, 0x4, "9be0e0b5"}, @global, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x5, "393d40ee"}, @main=@item_012={0x1, 0x0, 0xc, 'p'}, @global=@item_4={0x3, 0x1, 0xb, "814939ae"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfd3}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x15, 0x19, "b588bb91cc1155b5de2f4c62e3107f352afbe57c4a2b8077e4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0x80, "a0c7625dddbcbc04b4e673d866a5bdded76d37d89a15d0fcca1dc30a7087f62da14a8e3fc43c0518b91e76c69ba997cd799ded75e14d18819058990ee235fc0bdac1afdbcc01a585ba8bf95dbcae54b45ab6b10768f3c9776a61cc2db064ee3c557253347cd50c5d56fa7800ae57537d2c549a6498db5310931714733e8db993"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, 0x0) 08:28:16 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x1bc1, &(0x7f0000000180)={0x0, 0x45c8, 0x8, 0x1, 0x140, 0x0, r0}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)={0x200000, 0x0, 0x11}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x23456}, 0x9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x0, @private}}) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x2}, 0x2, 0x1000000, &(0x7f0000000440)={{0x80000001, 0x1000, 0x4, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x3ff, 0x1}}}, 0x6, &(0x7f0000000900), 0x1}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@bridge_delvlan={0x50, 0x71, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 08:28:16 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:16 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r1, 0x0, r3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 08:28:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40486311, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:16 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1290.242595][T26895] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1290.273005][T26895] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1290.302867][T26895] ftdi_sio 6-1:0.218: GPIO initialisation failed: -71 [ 1290.332084][T26895] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1290.375620][T30698] binder: 30686:30698 unknown command 0 [ 1290.381344][T30698] binder: 30686:30698 ioctl c0306201 200001c0 returned -22 [ 1290.554113][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.562093][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.574388][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1291.615707][T26895] usb 6-1: USB disconnect, device number 31 [ 1291.636335][T26895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1291.646197][T26895] ftdi_sio 6-1:0.218: device disconnected 08:28:17 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1292.082258][T26895] usb 6-1: new high-speed USB device number 32 using dummy_hcd 08:28:18 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:18 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1292.380788][T30727] binder: 30724:30727 unknown command 0 [ 1292.386533][T30727] binder: 30724:30727 ioctl c0306201 200001c0 returned -22 08:28:18 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:19 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(r4, 0xffffffffffffffff, 0x80000) write$binfmt_elf32(r4, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0xff, 0xe1, 0x3a2, 0x2, 0x3e, 0x81, 0x38b, 0x38, 0x88, 0x20, 0x8000, 0x20, 0x2, 0x3, 0xbd, 0x200}, [{0x6, 0x36bbd48b, 0xffff, 0xa45, 0x0, 0x450f75cc, 0xf2, 0x65af}], "9f2482ceac8cdf891922265f7c11582d470913ef5d27", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x56e) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)=""/203, 0xcb}], 0x1, &(0x7f0000000780)=""/132, 0x84}, 0x100}], 0x1, 0x40, &(0x7f0000000580)={0x0, 0x3938700}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x1, @sliced={0x0, [0x100, 0xff81, 0x81, 0x100, 0x7, 0x6, 0x3, 0xd44f, 0x3, 0xff, 0xff, 0x3, 0x8, 0x7, 0xd440, 0x7, 0xfffc, 0x7, 0x7fff, 0x9, 0xee, 0xf3c, 0x0, 0x8, 0x6, 0x75, 0xfff, 0x1, 0xfffc, 0xffff, 0x107, 0x2, 0x2, 0x6, 0x7, 0x4, 0x0, 0x3ca4, 0x7e0, 0x4, 0x0, 0x80, 0x9, 0x9, 0x4, 0x0, 0x8c, 0xa3], 0x9}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1293.861081][T30736] binder: 30731:30736 unknown command 0 [ 1293.867115][T30736] binder: 30731:30736 ioctl c0306201 200001c0 returned -22 [ 1293.952829][T26895] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1293.960503][T26895] usb 6-1: can't read configurations, error -71 08:28:19 executing program 5: r0 = syz_usb_connect(0x0, 0x581, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x33, 0x16, 0x83, 0x40, 0x1b3d, 0x162, 0x98ff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x56f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0x0, 0xf, 0x8f, 0xc7, 0x5, 0x0, [], [{{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x7f, 0xeb}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0xf2, 0xff, 0xe, [@generic={0x34, 0xa, "22eafd84958b83770e1a374699a7a17223f5ed38ec09d6effbeb6aac2fbd5df9e45a23dd3e8d1fe6df2237f5dfac72ddf07d"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x0, 0x0, 0x0, [@generic={0x5b, 0x9, "09fe2136a62272099bf0cdc386f16ad9cb6e18d6e7aaa3909dd5aa31a927395618c4e428abf9f451f5454cfad4e64162c9be2e24ee963d11f544ceb2403ae346c9e5b6d04f240485435ec1b46d086acd10f6dcfcc2c06456ad"}, @generic={0x77, 0x31, "ed66b32564819ddf5633d19b8634290ce1f1b5287c5a3bb2094cbe8a7bb7bd6e21c7508cb2dfd9a79735a461ec2ce8546f588304dd03df7466d2679dbb58f9c99f01403fc3c77c4eac2af8f82e67f125a14da84c478c50fa0ce13952a93e7055ba992e77fd00"/117}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x72, 0x5, 0x6d, [@generic={0x3c, 0x6, "c7c8b2f6a3e61769b375085dfbc8fc52f37b22805793812c1e0d2f8f5a762fa81ba4044797ca6f45e24fd758b22f81ba3632c154f2e8979dc6bf"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x40, 0x0, 0x36}}, {{0x9, 0x5, 0x85, 0x0, 0x400, 0x8, 0x48, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x20}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x7f, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x40}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xa2, 0xe6, 0x3}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0x1f, 0x7, [@generic={0xf7, 0x0, "8aa9b4cd0a4b3fc111db2db11055e82c52e901e95bc96a1d6cc13fb1e97b0613ea7d536d353a8be369cec04ef1552cc7d572bb39136b6c28ba6a318de4094ad68c52884832140e38735157a485a7136d71bbdc0f1bc06c195bee5ae120b692fb891d062300e6b3c86c5ac8fc5c31854a336e991aebe4f67a316ea0e181edacc473acd736dc86a2547d62fa414c0ee587ccc3fca1635c7d0b59e6e622498896c548357958d71381885dc17b732baf27e7455e1ccf51be5658fb2bafc2338e2ac9bd31e0cb65a21224f7894e0fad053ad233692d056f455eccbc0fe1033a4e8ad5625741ce8d58a5d3e3ebe73e6af641641c141a9507"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xdb, 0x1}, @generic={0xf2, 0x30, "25b79a383d9faca589b91ac87fd5094b1f6ef706b869cb81bfbf2bca0a808f5a488ca15269e7e8a9f506c4d25010e50bb11e8aba0a198e040f356e0ecf8a3e41c3addd1a78ee4f45ec72b9c621c8042e4a93dba0ab4c348a3779b528d04cac38e963c80c67a0f8fde78280b007c73e75b8a21a57df9ee2dcf7391258da037e9635bf179492195445f0457aca864031660569af7a1c5ba03964d7380fabad080a9c4ce3b74a79b3b4dccc0ccd04a5fcf15030a2984bfff0044b8e99e943b995e77563ba53e456a2d50ae1b2c4873f1fd9698c95b240b933c5af7fed1dd6a07226e539a8baa462bfe06de843bc5933733d"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x2, 0x69, 0xe7, [@generic={0x98, 0x31, "530593a9a1c617d2c22c9955ecc28bad77d92e040741c6e55e0cb4e249f28a10339fbb91dd9b50a71c8c4b3bcb5f01bb57f836576999f55cad84ec8e03f4f5632f6ac527fc5b53e89719532a910178fb5faa35ee3b3bb8d5f3549456f170eace8a390ac8e21cd676e809f9bedc86b14f4eb31521739a6f98f1231af8b549ab50ce0e4c9dcb6df4fad36032acd74ee0ea6cd27153fa8f"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x40, 0x7, 0x4, [@generic={0xe0, 0x23, "9d6ded671e3f5b0a9c9ac1a7372b0809def0e11b0a0d9bbd6f95f6ca2110e86bee338d899e9fc90f22fb4698355e5afa45d3ada38ded22e0ab6e32acae3f18644feae152ef5a16bf7a04a05e3972ef576b464c0213682028b13335c71dcbdfb0a143ce2fab02b95c353e41ac3da210a0eabccbd961b6419ec5d90c31b6d6b4c0792caff6c9e334e17f35b81b1347bd292eb09a7f1c4a3345fc05a773578e1f0b935d8338bb8b743f6fca95016195a6fe3dd919e0d44e0c5ad8c828879573c404d86b8bc184bcc1e5acb1db3345ce3e92e7058e98c288d56e65d09b3f8dae"}, @generic={0xe, 0x11, "fa419fa7c88de60417546430"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0xa, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x6, 0x1e1, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x1b, 0x64, 0x8b, 0x8, 0x162e, 0xba41, 0x1dff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1cf, 0x2, 0x0, 0xff, 0x3c56c75243d688d0, 0x7f, [{{0x9, 0x4, 0x7f, 0x5, 0x1, 0xff, 0x5d, 0x81, 0x4, [], [{{0x9, 0x5, 0x80, 0x4, 0x210, 0x0, 0x3, 0x3, [@generic={0xdc, 0x8, "0e77856d79cf285fb5dc89c8ed31bb55d035b347a39fecadaee84dad374fad8c7c684660a39306459c08bb46b63f53b3661fd27d23e2b1f607b326f4d0ccd510265463870da0131c9da5114ca22bd457dab05a88f5196f1c989e9d86a92b24260318317293930058cd784f447735196aca68c79bf4e6de6212bc340d37df03b574997c755c656aa38270de5022c8a865a65548583f494b35e91aad04d4d4a1feac0470b17872285b40559ed242518ead6456f69cd643d7fb30f9579bc67946141b6aa735684bb2aab3a78fd4b919e3d8dfb69866b929ffd9d246"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x20}]}}]}}, {{0x9, 0x4, 0x27, 0xcf, 0x4, 0xd8, 0x5e, 0xf1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x80}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0xd93, 0x81, "569f"}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x3, "cb"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x9}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x20, 'n'}]}], [{{0x9, 0x5, 0xf, 0x1, 0x7ff, 0x0, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x6, 0x8, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x81}, @generic={0x5e, 0xb, "c89ba112c78adeeb8ebb16755c001c61b0ddb83c354ea224647ff0568c965e916a482ac0a1af2371488cefa8a000ed4d7d8f1e71f590baf5df5449c9a4d88b02523c20c2fe6b0f62efed2c438c12cfc4ed0bd9a15c9fc2a2736f257a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0xda}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xa7, 0xe4, 0xc1}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x7, 0x1, 0x40, 0x20, 0x80}, 0xa9, &(0x7f0000001700)={0x5, 0xf, 0xa9, 0x2, [@generic={0x99, 0x10, 0xb, "73f143e2d462b2e9f37acbf5778460de0a046cf2b6c59731bb6dc70c358d9f37418620c155280c39a451326711f63f61392918ecaaf12eaef8769b4d7aa6d5365d8e3805540ee2752a4ae5f9b011208837f01ea28ddfad4887b7ffd235a4ce312c5fc7766a712d5f561e44d5be5e3a73df0b60538b878f7ee92837e0886ee40aca65db1dca3ee6561db69022ca9d0f7f739df38c490c"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x60, 0x8, 0x8, 0x0, 0x7f}]}, 0xa, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xe4f5}}, {0x35, &(0x7f00000005c0)=@string={0x35, 0x3, "30f965aa2e93d70b8aaf0f04f404cf54c6323e2483a6da01b43720bccba5585baafb13a257e25376f8057d9c5bfc48d70393a4"}}, {0x81, &(0x7f0000000e00)=@string={0x81, 0x3, "c3d63954fe969dc491548b4f6b4c2c816e266865334c0df44e04e6d36a8e40c87bd3c50cf9247989eeece5abe84545231799995dc0757f274eb95cafe283dfb035ef04052e233fcb33ada3a232b125b27f70b630787def6b4b54a88f6720ce05602f46acea80c0b62c4aa0bdd6ae81295349680bf31fdd7d4f563c94ed00fb"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x860}}, {0x2a, &(0x7f0000000540)=@string={0x2a, 0x3, "aadac4c2ac5fad4c5f6f7e58cba3f0ced6e36ad3624df66f9010840c9b766251576e29d6507f3118"}}, {0xd4, &(0x7f00000017c0)=@string={0xd4, 0x3, "692557a02f50e62cd57ea6836b73d1970b0ee732bdabeab30e5b46443e6dd388d4aa5ded46a9603c0568e7550af7c4cdb5493aa47fcbcca4fb315c0990b4355b1a171cd928179e6eb4890a5c7d99b08ab1cbd686c1b7497a759f0eef8e3fbdc29c772303cdadb742bc1d7cb87896d4bf9189c74d9b69b69ffcc210956fef596c0584475ed307baa7f63f5922ca6514b996d90ac2e91260db949958443d6f0e8979ac04ad0e1eb0f50b03518dd0f61dcf66cfcc996c8e905d35b3f5896bef29bbf5912e0cd3fece51aa145ec1361823567e1b"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x4a14}}]}) syz_usb_control_io(r1, &(0x7f0000001200)={0x2c, &(0x7f0000000fc0)={0x20, 0x23, 0x67, {0x67, 0xf, "65d50166018a8109cc3f215fea6bc1f2656ea83552c53e22aacc4f495c2cea8996ab26836e30d07dbf44a9345dd334d8337d81d41710b5c53e9d38e066d3c24dd35ac37d4f8bed4cbe72f52ab0de08dae31fcf4265f4aaf850f46559cfb52d74a9f9c35b36"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000001080)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x3, [@generic={0x5, 0x10, 0xa, "c629"}, @generic={0xbb, 0x10, 0x2, "81f0c02cacd58ff016ad5e487ace849149220c15862967a7291bfa8a6aa9a307f026f41f06e9707979fd5e05f4283d2597a5061c70bd5b511f9833eda60506c93a5b08037f41a76c17a6fb7682bef28d72d2bfba45adc205ecfc5d9851f49879c474653d1b377954667e67a2b5fd618f2cce5530e95c9a7a5fd9ed369a2b4e23ed28268d77e497a1f7dc198b7dd1b82b664978ba8b744d979e5ccf83715ff718a36f48f6a1eca53f74b2edad3a078e2eb0da0e7f683e15aa"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0xd, 0x7}]}}, &(0x7f0000001180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0xff, 0x1, "a942932b", "701a66fa"}}, &(0x7f00000011c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x10, 0x8, 0x80, 0x9, 0x6, 0x3976}}}, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x40, 0x14, 0x1a, "7031257a4980fd4d0162ae21a44b233df70a7c15e48f3edf6bb7"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f0000001380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000013c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001400)={0x40, 0xb, 0x2, "0448"}, &(0x7f0000001440)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001480)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000014c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001500)={0x40, 0x19, 0x2, "928a"}, &(0x7f0000001540)={0x40, 0x1a, 0x2, 0xa7e}, &(0x7f0000001580)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000015c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001600)={0x40, 0x21, 0x1, 0x8b}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x84, {0x9, 0x21, 0x101, 0x1f, 0x1, {0x22, 0x946}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0xf7, 0xe0, 0x20, 0x81}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "b01283b35480ceba55a5d8a40841dcf5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x3, 0x2}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="2f0336bd21d0745c8bf2215c850836ceacd7712c10c179ec6cef62aac3c449d9800e00"/47]}]}) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f00000001c0)={0x0, 0x3, 0x6, {0x6, 0xe, "8cdbe1a8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000240)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x2, "27228b8a"}, @local=@item_4={0x3, 0x2, 0x4, "9be0e0b5"}, @global, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x5, "393d40ee"}, @main=@item_012={0x1, 0x0, 0xc, 'p'}, @global=@item_4={0x3, 0x1, 0xb, "814939ae"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfd3}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x15, 0x19, "b588bb91cc1155b5de2f4c62e3107f352afbe57c4a2b8077e4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0x80, "a0c7625dddbcbc04b4e673d866a5bdded76d37d89a15d0fcca1dc30a7087f62da14a8e3fc43c0518b91e76c69ba997cd799ded75e14d18819058990ee235fc0bdac1afdbcc01a585ba8bf95dbcae54b45ab6b10768f3c9776a61cc2db064ee3c557253347cd50c5d56fa7800ae57537d2c549a6498db5310931714733e8db993"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, 0x0) 08:28:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:20 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:21 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0xd0e, 0x31324d59, 0x5, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x20, 0x7f}, {}, {0x40000001}], 0xa3, 0xf2, 0x6, 0x0, 0x4}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = memfd_secret(0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000100)=0x3, 0x100000000) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1301.971374][T26895] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1302.027689][T30750] binder: 30747:30750 unknown command 0 [ 1302.033580][T30750] binder: 30747:30750 ioctl c0306201 200001c0 returned -22 [ 1302.891958][T26895] usb 6-1: device descriptor read/all, error -71 [ 1302.910896][T26895] usb usb6-port1: attempt power cycle [ 1303.449681][T30776] binder: 30768:30776 unknown command 0 [ 1303.455481][T30776] binder: 30768:30776 ioctl c0306201 200001c0 returned -22 08:28:29 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r1, 0x0, r3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 08:28:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:29 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 08:28:29 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:29 executing program 5: r0 = syz_usb_connect(0x0, 0x581, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x33, 0x16, 0x83, 0x40, 0x1b3d, 0x162, 0x98ff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x56f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0x0, 0xf, 0x8f, 0xc7, 0x5, 0x0, [], [{{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x7f, 0xeb}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0xf2, 0xff, 0xe, [@generic={0x34, 0xa, "22eafd84958b83770e1a374699a7a17223f5ed38ec09d6effbeb6aac2fbd5df9e45a23dd3e8d1fe6df2237f5dfac72ddf07d"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x0, 0x0, 0x0, [@generic={0x5b, 0x9, "09fe2136a62272099bf0cdc386f16ad9cb6e18d6e7aaa3909dd5aa31a927395618c4e428abf9f451f5454cfad4e64162c9be2e24ee963d11f544ceb2403ae346c9e5b6d04f240485435ec1b46d086acd10f6dcfcc2c06456ad"}, @generic={0x77, 0x31, "ed66b32564819ddf5633d19b8634290ce1f1b5287c5a3bb2094cbe8a7bb7bd6e21c7508cb2dfd9a79735a461ec2ce8546f588304dd03df7466d2679dbb58f9c99f01403fc3c77c4eac2af8f82e67f125a14da84c478c50fa0ce13952a93e7055ba992e77fd00"/117}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x72, 0x5, 0x6d, [@generic={0x3c, 0x6, "c7c8b2f6a3e61769b375085dfbc8fc52f37b22805793812c1e0d2f8f5a762fa81ba4044797ca6f45e24fd758b22f81ba3632c154f2e8979dc6bf"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x40, 0x0, 0x36}}, {{0x9, 0x5, 0x85, 0x0, 0x400, 0x8, 0x48, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x20}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x7f, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x40}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xa2, 0xe6, 0x3}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0x1f, 0x7, [@generic={0xf7, 0x0, "8aa9b4cd0a4b3fc111db2db11055e82c52e901e95bc96a1d6cc13fb1e97b0613ea7d536d353a8be369cec04ef1552cc7d572bb39136b6c28ba6a318de4094ad68c52884832140e38735157a485a7136d71bbdc0f1bc06c195bee5ae120b692fb891d062300e6b3c86c5ac8fc5c31854a336e991aebe4f67a316ea0e181edacc473acd736dc86a2547d62fa414c0ee587ccc3fca1635c7d0b59e6e622498896c548357958d71381885dc17b732baf27e7455e1ccf51be5658fb2bafc2338e2ac9bd31e0cb65a21224f7894e0fad053ad233692d056f455eccbc0fe1033a4e8ad5625741ce8d58a5d3e3ebe73e6af641641c141a9507"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xdb, 0x1}, @generic={0xf2, 0x30, "25b79a383d9faca589b91ac87fd5094b1f6ef706b869cb81bfbf2bca0a808f5a488ca15269e7e8a9f506c4d25010e50bb11e8aba0a198e040f356e0ecf8a3e41c3addd1a78ee4f45ec72b9c621c8042e4a93dba0ab4c348a3779b528d04cac38e963c80c67a0f8fde78280b007c73e75b8a21a57df9ee2dcf7391258da037e9635bf179492195445f0457aca864031660569af7a1c5ba03964d7380fabad080a9c4ce3b74a79b3b4dccc0ccd04a5fcf15030a2984bfff0044b8e99e943b995e77563ba53e456a2d50ae1b2c4873f1fd9698c95b240b933c5af7fed1dd6a07226e539a8baa462bfe06de843bc5933733d"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x2, 0x69, 0xe7, [@generic={0x98, 0x31, "530593a9a1c617d2c22c9955ecc28bad77d92e040741c6e55e0cb4e249f28a10339fbb91dd9b50a71c8c4b3bcb5f01bb57f836576999f55cad84ec8e03f4f5632f6ac527fc5b53e89719532a910178fb5faa35ee3b3bb8d5f3549456f170eace8a390ac8e21cd676e809f9bedc86b14f4eb31521739a6f98f1231af8b549ab50ce0e4c9dcb6df4fad36032acd74ee0ea6cd27153fa8f"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x40, 0x7, 0x4, [@generic={0xe0, 0x23, "9d6ded671e3f5b0a9c9ac1a7372b0809def0e11b0a0d9bbd6f95f6ca2110e86bee338d899e9fc90f22fb4698355e5afa45d3ada38ded22e0ab6e32acae3f18644feae152ef5a16bf7a04a05e3972ef576b464c0213682028b13335c71dcbdfb0a143ce2fab02b95c353e41ac3da210a0eabccbd961b6419ec5d90c31b6d6b4c0792caff6c9e334e17f35b81b1347bd292eb09a7f1c4a3345fc05a773578e1f0b935d8338bb8b743f6fca95016195a6fe3dd919e0d44e0c5ad8c828879573c404d86b8bc184bcc1e5acb1db3345ce3e92e7058e98c288d56e65d09b3f8dae"}, @generic={0xe, 0x11, "fa419fa7c88de60417546430"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0xa, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x6, 0x1e1, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x1b, 0x64, 0x8b, 0x8, 0x162e, 0xba41, 0x1dff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1cf, 0x2, 0x0, 0xff, 0x3c56c75243d688d0, 0x7f, [{{0x9, 0x4, 0x7f, 0x5, 0x1, 0xff, 0x5d, 0x81, 0x4, [], [{{0x9, 0x5, 0x80, 0x4, 0x210, 0x0, 0x3, 0x3, [@generic={0xdc, 0x8, "0e77856d79cf285fb5dc89c8ed31bb55d035b347a39fecadaee84dad374fad8c7c684660a39306459c08bb46b63f53b3661fd27d23e2b1f607b326f4d0ccd510265463870da0131c9da5114ca22bd457dab05a88f5196f1c989e9d86a92b24260318317293930058cd784f447735196aca68c79bf4e6de6212bc340d37df03b574997c755c656aa38270de5022c8a865a65548583f494b35e91aad04d4d4a1feac0470b17872285b40559ed242518ead6456f69cd643d7fb30f9579bc67946141b6aa735684bb2aab3a78fd4b919e3d8dfb69866b929ffd9d246"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x20}]}}]}}, {{0x9, 0x4, 0x27, 0xcf, 0x4, 0xd8, 0x5e, 0xf1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x80}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0xd93, 0x81, "569f"}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x3, "cb"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x9}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x20, 'n'}]}], [{{0x9, 0x5, 0xf, 0x1, 0x7ff, 0x0, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x6, 0x8, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x81}, @generic={0x5e, 0xb, "c89ba112c78adeeb8ebb16755c001c61b0ddb83c354ea224647ff0568c965e916a482ac0a1af2371488cefa8a000ed4d7d8f1e71f590baf5df5449c9a4d88b02523c20c2fe6b0f62efed2c438c12cfc4ed0bd9a15c9fc2a2736f257a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0xda}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xa7, 0xe4, 0xc1}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x7, 0x1, 0x40, 0x20, 0x80}, 0xa9, &(0x7f0000001700)={0x5, 0xf, 0xa9, 0x2, [@generic={0x99, 0x10, 0xb, "73f143e2d462b2e9f37acbf5778460de0a046cf2b6c59731bb6dc70c358d9f37418620c155280c39a451326711f63f61392918ecaaf12eaef8769b4d7aa6d5365d8e3805540ee2752a4ae5f9b011208837f01ea28ddfad4887b7ffd235a4ce312c5fc7766a712d5f561e44d5be5e3a73df0b60538b878f7ee92837e0886ee40aca65db1dca3ee6561db69022ca9d0f7f739df38c490c"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x60, 0x8, 0x8, 0x0, 0x7f}]}, 0xa, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xe4f5}}, {0x35, &(0x7f00000005c0)=@string={0x35, 0x3, "30f965aa2e93d70b8aaf0f04f404cf54c6323e2483a6da01b43720bccba5585baafb13a257e25376f8057d9c5bfc48d70393a4"}}, {0x81, &(0x7f0000000e00)=@string={0x81, 0x3, "c3d63954fe969dc491548b4f6b4c2c816e266865334c0df44e04e6d36a8e40c87bd3c50cf9247989eeece5abe84545231799995dc0757f274eb95cafe283dfb035ef04052e233fcb33ada3a232b125b27f70b630787def6b4b54a88f6720ce05602f46acea80c0b62c4aa0bdd6ae81295349680bf31fdd7d4f563c94ed00fb"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x860}}, {0x2a, &(0x7f0000000540)=@string={0x2a, 0x3, "aadac4c2ac5fad4c5f6f7e58cba3f0ced6e36ad3624df66f9010840c9b766251576e29d6507f3118"}}, {0xd4, &(0x7f00000017c0)=@string={0xd4, 0x3, "692557a02f50e62cd57ea6836b73d1970b0ee732bdabeab30e5b46443e6dd388d4aa5ded46a9603c0568e7550af7c4cdb5493aa47fcbcca4fb315c0990b4355b1a171cd928179e6eb4890a5c7d99b08ab1cbd686c1b7497a759f0eef8e3fbdc29c772303cdadb742bc1d7cb87896d4bf9189c74d9b69b69ffcc210956fef596c0584475ed307baa7f63f5922ca6514b996d90ac2e91260db949958443d6f0e8979ac04ad0e1eb0f50b03518dd0f61dcf66cfcc996c8e905d35b3f5896bef29bbf5912e0cd3fece51aa145ec1361823567e1b"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x4a14}}]}) syz_usb_control_io(r1, &(0x7f0000001200)={0x2c, &(0x7f0000000fc0)={0x20, 0x23, 0x67, {0x67, 0xf, "65d50166018a8109cc3f215fea6bc1f2656ea83552c53e22aacc4f495c2cea8996ab26836e30d07dbf44a9345dd334d8337d81d41710b5c53e9d38e066d3c24dd35ac37d4f8bed4cbe72f52ab0de08dae31fcf4265f4aaf850f46559cfb52d74a9f9c35b36"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000001080)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x3, [@generic={0x5, 0x10, 0xa, "c629"}, @generic={0xbb, 0x10, 0x2, "81f0c02cacd58ff016ad5e487ace849149220c15862967a7291bfa8a6aa9a307f026f41f06e9707979fd5e05f4283d2597a5061c70bd5b511f9833eda60506c93a5b08037f41a76c17a6fb7682bef28d72d2bfba45adc205ecfc5d9851f49879c474653d1b377954667e67a2b5fd618f2cce5530e95c9a7a5fd9ed369a2b4e23ed28268d77e497a1f7dc198b7dd1b82b664978ba8b744d979e5ccf83715ff718a36f48f6a1eca53f74b2edad3a078e2eb0da0e7f683e15aa"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0xd, 0x7}]}}, &(0x7f0000001180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0xff, 0x1, "a942932b", "701a66fa"}}, &(0x7f00000011c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x10, 0x8, 0x80, 0x9, 0x6, 0x3976}}}, &(0x7f0000001640)={0x84, &(0x7f0000001240)={0x40, 0x14, 0x1a, "7031257a4980fd4d0162ae21a44b233df70a7c15e48f3edf6bb7"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f0000001380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000013c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001400)={0x40, 0xb, 0x2, "0448"}, &(0x7f0000001440)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001480)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000014c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001500)={0x40, 0x19, 0x2, "928a"}, &(0x7f0000001540)={0x40, 0x1a, 0x2, 0xa7e}, &(0x7f0000001580)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000015c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001600)={0x40, 0x21, 0x1, 0x8b}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x84, {0x9, 0x21, 0x101, 0x1f, 0x1, {0x22, 0x946}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0xf7, 0xe0, 0x20, 0x81}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "b01283b35480ceba55a5d8a40841dcf5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x3, 0x2}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="2f0336bd21d0745c8bf2215c850836ceacd7712c10c179ec6cef62aac3c449d9800e00"/47]}]}) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f00000001c0)={0x0, 0x3, 0x6, {0x6, 0xe, "8cdbe1a8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000240)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x2, "27228b8a"}, @local=@item_4={0x3, 0x2, 0x4, "9be0e0b5"}, @global, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x5, "393d40ee"}, @main=@item_012={0x1, 0x0, 0xc, 'p'}, @global=@item_4={0x3, 0x1, 0xb, "814939ae"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfd3}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x15, 0x19, "b588bb91cc1155b5de2f4c62e3107f352afbe57c4a2b8077e4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0x80, "a0c7625dddbcbc04b4e673d866a5bdded76d37d89a15d0fcca1dc30a7087f62da14a8e3fc43c0518b91e76c69ba997cd799ded75e14d18819058990ee235fc0bdac1afdbcc01a585ba8bf95dbcae54b45ab6b10768f3c9776a61cc2db064ee3c557253347cd50c5d56fa7800ae57537d2c549a6498db5310931714733e8db993"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, 0x0) 08:28:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:32 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1306.299832][T30787] binder: 30785:30787 unknown command 0 [ 1306.305777][T30787] binder: 30785:30787 ioctl c0306201 200001c0 returned -22 08:28:32 executing program 5: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) [ 1306.738844][T26895] usb 6-1: new high-speed USB device number 34 using dummy_hcd 08:28:32 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1306.800202][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.808225][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.816588][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:28:32 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1306.991006][T26895] usb 6-1: device not accepting address 34, error -71 [ 1306.998629][T30802] binder: 30800:30802 unknown command 0 [ 1307.004389][T30802] binder: 30800:30802 ioctl c0306201 200001c0 returned -22 08:28:38 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 08:28:39 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:40 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r1, 0x0, r3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 08:28:40 executing program 5: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 08:28:40 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:40 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1315.400629][T30821] binder: 30819:30821 unknown command 0 [ 1315.406235][T30821] binder: 30819:30821 ioctl c0306201 200001c0 returned -22 08:28:41 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 08:28:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1316.535143][T30838] binder: 30836:30838 unknown command 0 [ 1316.540855][T30838] binder: 30836:30838 ioctl c0306201 200001c0 returned -22 08:28:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:42 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1316.827791][T30843] binder: 30842:30843 unknown command 0 [ 1316.833649][T30843] binder: 30842:30843 ioctl c0306201 200001c0 returned -22 08:28:43 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) 08:28:43 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x4, 0x0, 0x0, 0xc, 0x1}, @fwd={0xe}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000480)=""/146, 0x35, 0x92, 0x1}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4000, @fd=r3, 0x7877a334, 0x0, 0x0, 0x5, 0x1, {0x3}}, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="d5071d465bc76f5df9", 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:43 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1318.181914][T30855] binder: 30854:30855 unknown command 0 [ 1318.187583][T30855] binder: 30854:30855 ioctl c0306201 200001c0 returned -22 [ 1318.339407][T30859] binder: 30858:30859 unknown command 0 [ 1318.345165][T30859] binder: 30858:30859 ioctl c0306201 200001c0 returned -22 08:28:44 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r1, 0x0, r3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 08:28:44 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:44 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000000240)=""/237, 0xed}], 0x2, 0x0, 0x3f) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x400, 0x0, 0xdd, 0x3ff, r4}, 0x10) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:44 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 08:28:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:44 executing program 5: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) [ 1319.138439][T30874] binder: 30871:30874 unknown command 0 [ 1319.144112][T30874] binder: 30871:30874 ioctl c0306201 200001c0 returned -22 08:28:45 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:45 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 08:28:45 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1319.952240][T25195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.960631][T25195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.971410][T26895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:28:45 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:46 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 1320.548426][T25195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.556485][T25195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.567550][T26895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1320.976203][T30899] binder: 30892:30899 unknown command 0 [ 1320.982151][T30899] binder: 30892:30899 ioctl c0306201 200001c0 returned -22 [ 1322.287408][T30878] bridge0: port 4(hsr0) entered disabled state [ 1322.293825][T30878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.301719][T30878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.743802][T30878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.793860][T30878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.158058][T30878] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.167168][T30878] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.176833][T30878] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.186046][T30878] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 08:28:49 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(r3, 0xffffffffffffffff, 0x80000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(r5, r4, 0x80000) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r8 = epoll_create(0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x81, 0x0, &(0x7f0000000080)=[r3, r2, r5, r6, r7, r8]}, 0x6) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88", 0x12}], 0x1) splice(r0, 0x0, r9, 0x0, 0x100000fffffff9, 0x0) sched_setscheduler(0x0, 0x5, 0x0) 08:28:49 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:49 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:49 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 08:28:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x1d) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$FUSE_ATTR(r5, &(0x7f0000000180)={0x78}, 0x78) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000300)=0x101) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x1b) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x1}, 0x0) [ 1323.443138][T30918] binder: 30913:30918 unknown command 0 [ 1323.448822][T30918] binder: 30913:30918 ioctl c0306201 200001c0 returned -22 08:28:49 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:49 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3, 0x40}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r3, &(0x7f0000000340)={0x100, 0x1ba, 0x12}, &(0x7f0000000480)='./file0\x00', 0x18, 0x0, 0x12345}, 0x10001) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="ef01f35502d30000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)={0x1f, 0x2, 0x4, 0x400, 0x4e8, {0x0, 0xea60}, {0x2, 0x9, 0x40, 0x6, 0x7, 0x5, "cdba1c7f"}, 0x0, 0x3, @userptr=0x9, 0xfffffffd, 0x0, r7}) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:49 executing program 1: r0 = syz_io_uring_setup(0x3773, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:50 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(r3, 0xffffffffffffffff, 0x80000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(r5, r4, 0x80000) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r8 = epoll_create(0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x81, 0x0, &(0x7f0000000080)=[r3, r2, r5, r6, r7, r8]}, 0x6) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88", 0x12}], 0x1) splice(r0, 0x0, r9, 0x0, 0x100000fffffff9, 0x0) sched_setscheduler(0x0, 0x5, 0x0) [ 1324.143647][T30941] binder: 30937:30941 unknown command 0 [ 1324.149563][T30941] binder: 30937:30941 ioctl c0306201 200001c0 returned -22 08:28:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:50 executing program 1: r0 = syz_io_uring_setup(0x3773, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:51 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) syz_emit_ethernet(0xce, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @local, @val={@val={0x9100, 0x2}, {0x8100, 0x2}}, {@mpls_mc={0x8848, {[{0xff, 0x0, 0x1}, {0x7}, {0x1}, {0x40, 0x0, 0x1}, {0xd23, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2}, {0x3}, {0x8}], @ipv4=@icmp={{0x23, 0x4, 0x3, 0x1, 0x94, 0x67, 0x0, 0x1, 0x1, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x14, 0xe2, 0x3, 0x3, [{@remote, 0xa240}, {@loopback, 0xfffffffa}]}, @noop, @timestamp_addr={0x44, 0x24, 0x32, 0x1, 0xf, [{@loopback, 0x9be5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0x5f, 0x3, 0xb, [{@rand_addr=0x64010100, 0x101}, {@multicast1, 0x2000008c}, {@multicast1, 0x1f}, {@multicast1, 0x2}, {@multicast2, 0x10000}, {@loopback, 0x2}]}, @generic={0x83, 0xb, "6870f29c41431bb7c4"}]}}, @info_reply={0x10, 0x0, 0x0, 0x2, 0x6}}}}}}, &(0x7f00000000c0)={0x0, 0x3, [0x2af, 0x908, 0xdb9, 0xd0f]}) syz_emit_ethernet(0x305, &(0x7f0000000540)={@local, @multicast, @void, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}, {0x6}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv4=@gre={{0x12, 0x4, 0x3, 0xd, 0x2e7, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x3e, 0x0, 0x3, [0xff, 0x8]}, @ra={0x94, 0x4}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0x7, [{@private=0xa010100}]}, @generic={0x89, 0x12, "ff5233cbec0a9516de8de05234b9e721"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x73, 0x1, [0x0, 0x9], "905994ff6ab242d82102ac534b64409e19cbe886b15cc5ec114adab584d68848f587de1612cd769445fe7272d677cece6dacdd323879ab42b69b35170d710698fe11438188267422272d41e7c6f27d02f108c4d4aa7a5d35193e37fef31698a0c3cabd4e78771f8c5f4c3b49cf47a9be447061"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6, 0x20, 0x7b3], "e64ee8ebd3f8f16543ab8c174d7b4873c0658aeb7df69d1076745caa6a753f90fb5086dd54f4447e0d469f573712786379c0fb6fb167355b06563b5c2559785d8a0e719b848db04cec1cfcc9f3e6cfca0b6ba2a675f8e1979f12653cdee8b976ce8f68200f428534755f0810d35f14882161b00a37cfc79242deecda6d4252b30cda0153dac855b0df54722a5838f3619c0f4f940a88f8c0806f6c1f829d03ec11f2fdef3aae79e05267363141c8b0987cb52c4686125c394a5e4d263ab69a79f560e9af07d23f4e62709e324cdf8cb31a07c7"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x2], "09bc36705a470fa03624ae28c21ad8625a6a2b7cb42f26dc9d7cce4442b6abd9e56ccca7b4ef64d129189d242d3ba984cf226c137bb6f9326333755083540de567cb170d87a4554eaec21a21a41198097798061d5a0d3cbe8c54c18788752e4ef15942ff0fe6bb8992d9eb0967da4e7256909a130b8fd7063655d18f481361377334a99960db27dfc73bfa521f5d7b2c6f70a9645a4fe103f91a230b0031c2226c5144934296ddac6f89b7baf2a172c2cc4538459567fb5a2a206685a1d3a42506a4799491206a7d75d40d4e"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x3d, 0x0, 0x1, 0x0, 0x7, 0x1d}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x10000, 0x6, 0x0, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "50705db87504308923494c90dbfd50733163023d2d294ef7d28e82843f2fb4f3f19bed9e035b79967a55fdd3664803a5beccadb2c5a4eae7b97bd4"}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@can={0xc, {{0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "f94179c0fb0882ae"}}}}, 0x0) [ 1325.330607][T30958] binder: 30955:30958 unknown command 0 [ 1325.336372][T30958] binder: 30955:30958 ioctl c0306201 200001c0 returned -22 08:28:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:51 executing program 1: r0 = syz_io_uring_setup(0x3773, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1325.654722][T30970] binder: 30967:30970 unknown command 0 [ 1325.660565][T30970] binder: 30967:30970 ioctl c0306201 200001c0 returned -22 08:28:51 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 08:28:51 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) epoll_create(0x9) syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000000)={0x9, 0x80000, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 08:28:51 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x2, 0x8, 0x0, 0x0, 0x14, 0x0, {0xfffe}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) io_uring_enter(0xffffffffffffffff, 0x6374, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x646b, 0x2, 0x4, 0x2000, 0x4, {0x0, 0xea60}, {0x4, 0x8, 0x40, 0x1, 0x5, 0xf7, "d50d7801"}, 0x3, 0x1, @userptr=0x1084, 0xc000}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000340)=0x6, 0xef96) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:51 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:51 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f00000003c0), 0x2, 0x801) r1 = syz_open_dev$admmidi(&(0x7f00000003c0), 0x2, 0x801) close(r0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = dup3(r2, r0, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) writev(r1, &(0x7f0000000040)=[{}], 0x1) [ 1325.996303][T30983] binder: 30975:30983 unknown command 0 [ 1326.001994][T30983] binder: 30975:30983 ioctl c0306201 200001c0 returned -22 08:28:51 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:51 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) dup2(r1, r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setown(r2, 0x8, 0x0) 08:28:52 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x4525}, 0x0, 0x0, 0x492}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(r4, r3, 0x80000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0xb8d6c000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x9, 0x1, 0x0) sendfile(r5, r2, 0x0, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x1c, 0x0, "8ef769b90dd589d026662048da11f336301721d800deeaf78423db3c0c35823b0fe9d11dac233820394550d185017cc82e53d88421f932649a0d1316dbad943008bd2a67191590aa5419f74e31e025ca"}, 0xd8) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @empty}, 0xffffffffffffff8a) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "15442c06dcc34351", "fdfa9d88223aff8bfcc976a635e19c17", "c10ad498", "15c0f128cb4b1e7e"}, 0x28) sendfile(r1, r0, 0x0, 0x7ffff000) 08:28:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1326.312614][T30992] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1326.377143][T30992] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 08:28:52 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1326.496985][T31001] binder: 30999:31001 unknown command 0 [ 1326.502911][T31001] binder: 30999:31001 ioctl c0306201 200001c0 returned -22 08:28:52 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0xa4, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x100, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x3, 0x0, 0x0, 0x0, 0x3fffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000300)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f00000013c0)="6ae1ea5052d76340cb631a4d814d304f54f1b50938672774b4a75805bb68863c0118415a85fd7ea567fd7804acf16c1ee178c2ead3a5d6a58d71d3573608f5b2b5f7b7d9bfbe4a9c79abe7c118176adc3456b65ae4cd327f7c383d1755da8c5956b13994373a5b779a1648fec57c87772b2607199eec5cd1fb8a99094f43cd0dbec2d1446bc8f974c279f6c29a98c8ddd6840dbf8635277afc7bafc72c0f49c9dd3bb3beb4bd0d3d224b458e2672f2b9eaa0ae2a4d", 0xb5}, {&(0x7f0000001480)="db124ad223a7ff67506cafc1a4d4dd84f3993834b28f07705f7b42b4af76f4e05b0a9628b531e709bf25320b2a8a6b3000c1db388553aed73f22f2a69b99592bb1932610cd640dc04365631912a9a36dc0916baa2b1cbf2084d946f2618a11c62c", 0x61}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) read$dsp(0xffffffffffffffff, &(0x7f0000001500)=""/82, 0x52) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x1}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4001, 0x0, 0x16}) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000380)={0x5, &(0x7f0000001700)=[{0x0, 0x89, &(0x7f00000000c0)="05f78dba0f17dad2ecbcbbc79603ec51751bebbe98004d280efec16cfccf955ec29097313f52721be3ebc4ae9e1674577338d43106debf002011d7764a86636c14adc7acfe0d3b95fd6c61c69cfbcd0a0e83f6421d038668205024f00f72a0a2ac2647c4b2ab373fbc6fa805fa4a48ccc2bbad2799f8f718ae569ccdcf8b001566db850de46d958d5b", 0x2}, {0x401, 0x57, &(0x7f00000001c0)="85641caca438ef800a33b666c85d4ebaf1c69b28a842afef4072899fddf07902f8727267d8ea01b3e067ab089fbf345b9f931aa74a614a9e324bec12469697f437da3bb0f402f428fadd0c3c068dab2d25b841c748a8bc", 0x1}, {0x0, 0xa7, &(0x7f0000000240)="c4ab06dd321e8098eb553c4f56c0901a353d1414ebae12f3b308a0329c6356e6e5211b427c057c6ff7af1193425e59da73ef70a8f6c2eaf63905c347b4729656387375683140b7b41c6152ee3fb408282668e17c6b103508655e582c9a04ad18c093fe386ee41b2bbe70401bbd964fee3ed72d9635c50f969296fe9c80269ef7f9160fffb8790d2c5c2e98dadf3f9a64b4b31f366c43a3b253e51e196115ff0c50190b87d7e6f1"}, {0x5, 0xb3, &(0x7f00000015c0)="056bc27647a296b7e5ffd38c5f0940f0b9637ae71655028f62d605c57d9bba0f520d444c3d788de3f2838d43042c736fe3f856db91292414e400e2c9941e34c9d25a27c2f8c73eb0f2d351ab8ac706ef6d0e568f140988c270dd0b5535e6206d08e18400ec3a4cbfa6151d3b4d767a8e23ca94a7ea4e1d5af6d123bdd564f4d643f591b903c2265314ccb6bf17a2615bb2d5d7a03769e77f6d8f247a76c3a9b1d66cdbec13d6c216d4ddf0410e89ce458b1f41", 0x0, 0x1}, {0x0, 0x1c, &(0x7f0000001680)="3f03a0e237e395421e96a3576199f2c483ad76d8c937826df3e2bc3f", 0x0, 0x1}]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000003c0)={{0x0, 0x178c60000000000, 0x9, 0x3, 0x7ff, 0x7fffffff, 0x7, 0x6, 0x1, 0x6, 0x9, 0x0, 0x7, 0x5, 0x400}}) [ 1326.715292][T31006] hub 9-0:1.0: USB hub found [ 1326.751045][T31006] hub 9-0:1.0: 8 ports detected [ 1326.870111][T31013] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #0 [ 1326.935130][T31006] usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.4' sets config #1 08:28:52 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x87a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6800) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 08:28:52 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:52 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x91b}, 0x40100, 0x27, 0x2b740, 0x0, 0x2, 0x6, 0x0, 0x0, 0x2000}, r0, 0x0, r2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) 08:28:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0xfffff030}, {0x80000006, 0x0, 0x0, 0x20}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4415acda5c00040000000080000000000000", @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r4, r3, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) recvfrom(r0, &(0x7f0000000000)=""/110, 0x6e, 0x734, 0x0, 0x0) [ 1327.201357][T31028] binder: 31017:31028 unknown command 0 [ 1327.207028][T31028] binder: 31017:31028 ioctl c0306201 200001c0 returned -22 08:28:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x250102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$cgroup_pid(r4, &(0x7f0000000040)=r0, 0x12) ioctl$KVM_SET_LAPIC(r3, 0x4008ae89, &(0x7f00000003c0)={"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"}) 08:28:53 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:53 executing program 4: r0 = epoll_create(0x3ac4) syncfs(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_delroute={0x78, 0x19, 0x20, 0x70bd2d, 0x25dfdbfc, {0xa, 0x20, 0x80, 0x81, 0xfc, 0x0, 0xfd, 0x0, 0x200}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_METRICS={0x49, 0x8, 0x0, 0x1, "7152faffbb77f4d052dd5b074b6372b3dfbaa8b889ffc7d1b05468a43f756a498c18e6e7ca4f70859116d789b3f763ab0061a33e3e9100a410c815064fea6cbc1b7f914de0"}]}, 0x78}}, 0x0) 08:28:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x8, 0x0, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x4, 0x4b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x706b, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:28:53 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:54 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) io_uring_enter(r5, 0x687f, 0x2db4, 0x3, &(0x7f0000000180)={[0xffff]}, 0x8) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r6 = io_uring_setup(0x8050fb, 0x0) r7 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r7, 0xffffffffffffffff, 0x0) ftruncate(r6, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:54 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1328.202837][T31053] binder: 31051:31053 unknown command 0 [ 1328.208486][T31053] binder: 31051:31053 ioctl c0306201 200001c0 returned -22 08:28:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1}, 0x220, 0x5, 0x3, 0x5, 0x54, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) 08:28:54 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:54 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1328.676006][T31073] binder: 31069:31073 unknown command 0 [ 1328.682013][T31073] binder: 31069:31073 ioctl c0306201 200001c0 returned -22 08:28:55 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:28:55 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x2, &(0x7f0000000080)={[0xfff]}, 0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xf6, 0xf5, 0x42, 0x40, 0x856, 0xac31, 0xd841, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0x34, 0xa}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(r3, r2, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, r2) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000ac0)={0x0, 0x7, 0x1, "82"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:28:55 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:55 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) write$binfmt_elf64(r1, &(0x7f00000012c0)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="200000001200", 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000080)={0x4, &(0x7f0000000500)=[{0x9, 0xf2, &(0x7f0000000240)="1de7b59b57b27237d605409d281e213d710cf7a7b34375cbaa68ea7261c7896a7a9c1137a9e0125dd4279a26ab0a8134adffaee9e7aa8b3d066dc12a2ead70ae918d8b606228b138c0f8cf304dc5bda7ffa0d6e33d0e95c1f54fae047a3ac082600c4f726a765bd0ed3f4165fd73c06c199f17be7d2fdb007528b28421fe7885cc10d91f1a19f33a367870b72a6c50a0de5d78be2afa31cbcac6fea947ed996f4b8ea90bd50e9c9f02f900d7f65f010c6d6f3b2084d437f769b4b8ef64efe749438293c41a262612f2058500169b19998a0179b145b08a47b75a98eedac41cdcf6be2bcd6cf3bec257464d685c71caa0f39e", 0x1, 0x1}, {0x101, 0x73, &(0x7f0000000580)="836030646798c225423d7a15514d2532190d0a922ddf8f8f4065f9cf75a5164c6c11fcd08eb1923339e3e758a041034f099a54e1740113662b274f1a4a4ab34e9955a4c60bcf534e623cd86e8da5ba94aa381ac86eccf05edff3b6b76a730e7237a5f894697846c7ac13d1eff020b6999963bf"}, {0xfffffff9, 0x18, &(0x7f0000000000)="fb26a6b1785e86d2482be79806b18acb26bda1ffc0edcf00", 0x1, 0x1}, {0x3, 0xa1, &(0x7f0000000440)="6de109dafff3edf8a03eb621d8f6b628b1e3df081ec228a15b386efe678bfbfbcbab24c25613a9699767257f1a8adc8b0d7d5510d568acb126dcc4fa8f20d784a15f944f9f21a0e48390f2ef71e8c6f95670494bd23c12481cef056c2ae808ec4ea0a1b51a21a47c8961fee7ad5db04efdf0b3423de2b1d0df170fb3590f2662991d37742c819bab54dba9e5344178a720b0a2c8401bcc8808204b5f57d8c9d039", 0x1}]}) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) socket$packet(0x11, 0x3, 0x300) [ 1329.509368][T31095] binder: 31092:31095 unknown command 0 [ 1329.515093][T31095] binder: 31092:31095 ioctl c0306201 200001c0 returned -22 08:28:55 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r1, r0, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=@deltclass={0x4a0, 0x29, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0xa, 0xfff2}, {0x8, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_CEIL64={0xc}, @TCA_HTB_RATE64={0xc, 0x6, 0x7377}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x2, 0x4, 0x3, 0x3, 0x7}, {0x2d, 0x2, 0x6, 0x6, 0x25aa, 0x2}, 0x8000, 0x0, 0x1, 0x3, 0xffffffff}}, @TCA_HTB_CTAB={0x404, 0x3, [0x400, 0x1, 0x0, 0x4, 0xeb8, 0x6, 0x40, 0x800, 0x1, 0x1, 0x401, 0x5, 0xffffffff, 0x1, 0x4, 0x7, 0xf1e, 0x7, 0x20, 0x5a, 0x4, 0x8001, 0x5, 0xf4, 0x1da, 0x3ff, 0x0, 0x1ffc0, 0x2aa2, 0x0, 0x4, 0x9, 0x9, 0x9, 0x5, 0x101, 0x6c, 0x3, 0x8, 0x7ff, 0x9, 0x1e93, 0x9, 0x6, 0x468e, 0x80000000, 0x7, 0x2, 0x3, 0xa1, 0x7fffffff, 0x5, 0xfffffff9, 0xffff8000, 0x0, 0x40000, 0x1f, 0xe7f, 0x9, 0x4, 0x400, 0x9, 0x7, 0xd06, 0x80000001, 0x1, 0x280, 0x8, 0x3, 0x1ff, 0x38, 0xfffffff7, 0x0, 0x9, 0x4, 0x13, 0x5, 0x3, 0x21, 0x400, 0x2, 0x20, 0x1, 0x7, 0x2, 0x7f, 0xfffffffe, 0x9, 0x9, 0x5, 0x1, 0xffff, 0x7fff, 0x6, 0x4, 0x3, 0x134e, 0x80, 0xfff, 0x80000000, 0x6, 0x7, 0xffffffff, 0x7fff, 0x7ff, 0x2, 0x7, 0x80, 0x2, 0x7, 0x0, 0x5, 0x5, 0x80000000, 0x1f, 0x3f, 0x3, 0x80, 0x784, 0x3, 0xbb91, 0xff, 0x3, 0x9, 0x40, 0x200, 0x0, 0xf98d, 0x400, 0x101, 0x2, 0x6, 0x9, 0x18, 0xff, 0x800, 0x4c, 0x2, 0x7ff, 0x8001, 0x7, 0x4, 0x4, 0x401, 0x9, 0x1, 0x7, 0x800, 0x401, 0xdcf, 0x1, 0xfff, 0x4, 0x400, 0x9, 0x9, 0xffffffff, 0x1, 0x1, 0x3, 0xfffffc93, 0xd9, 0x8000, 0x7, 0x3, 0x10001, 0x0, 0x2, 0x3, 0x4, 0x6, 0x1, 0xf1, 0x6, 0xf8, 0x8, 0x8, 0x0, 0x6, 0x16fa8c, 0x3, 0x3, 0x4b, 0x101, 0x40, 0x5, 0x8, 0xc4, 0x7, 0x6, 0x1, 0x9, 0x7, 0xfb, 0x2, 0x20, 0xfffffffc, 0xffffffff, 0x0, 0x6, 0x3ff, 0x7fff, 0x2, 0x2, 0xefd, 0x0, 0x2b8, 0x7, 0x6, 0x0, 0x7ff, 0xf8cb, 0x7, 0x81, 0x7fffffff, 0x9, 0xfffffffc, 0x2, 0x1, 0x6, 0x80000001, 0x2, 0xb4, 0x401, 0x3fed, 0x8001, 0x43, 0x200, 0x9, 0xc39, 0x1, 0x6, 0x4, 0x81, 0x8, 0x3, 0x7fffffff, 0x10001, 0x0, 0x4, 0x80000001, 0x9e, 0x9, 0x20, 0x8, 0x8, 0xffff833e, 0x2, 0x3ff, 0x30000, 0x4, 0x6, 0x8000, 0xffffffff, 0x6, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x4085}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) getpid() r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) connect(r3, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x8, 0x7e, "ad7bfbfa977aa0aaa334eca9183bf3cf8cdbf9cc73cf0407c5a54ad9d238e7af1cbf5d3f3568f5f8296c35b0ea4c4d3069f0d2db4a9addda733a0119b1a774", 0x26}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) dup(r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r5, r4, 0x0, 0x3) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x200, r2, &(0x7f0000000180)="3d1b7aa040e791a3cf19662555e3c9187f798426944c1e3183a2a9d0d7154f23c46bf71cc91377549412f42734058c249c074c919f856ac2caa7444fc9812b0116f2986c9fbbb543bddce6862fc0d2", 0x4f, 0x1, 0x0, 0x2, r4}]) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0xf79b) 08:28:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1329.706746][T31101] binder: 31099:31101 unknown command 0 [ 1329.712635][T31101] binder: 31099:31101 ioctl c0306201 200001c0 returned -22 08:28:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:56 executing program 2: r0 = syz_io_uring_setup(0x12d1, &(0x7f00000005c0)={0x0, 0x4, 0x10}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x8}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x13, 0x20000000, r5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd_index, 0x2, &(0x7f0000000ac0)=[{&(0x7f0000000480)="f75230e75c016678336f0266bdcac1cebb", 0x11}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f00000004c0)="60e7795e8b8747a7aac42444b715de342f78c628697fd814cbab6b16284fc5edb2010b233b87d006d0ab128babd336a4f8a07247181858010953acbd6b605037bb4bcb8587e48b1e371b2279f8d862aee042b27816c315d99df87f46e17ea470ed0ecb94252adc6223a9135d7462a7357751a62c152ed9cf77b2ef037e4596a78c66b09e2a5eabb480ee513a64a55e989a9b48c9f45e5f4c0a48555235a2201a27a8", 0xa2}, {&(0x7f0000003080)="bb9f6a949d3da9676d92311827848f99cfd26bc10bd2b82d31d1d5de3e95723175d5a6a0210315a18a187b0a9309882d3df90363abbe121bbe2ab3ee7afb48212abcf54723cca30a9253382cba40018929d344204d56e00224d4b30b201a21d9e0ea4f0329ad85ff23f955dc0a3456768630e8190c2d69cd599e529296b598c44921ef88f415f3af764e9b1585b8bcb4cd1aa3dceb5446bc9f646de45f59be7cff79b8b9b99592ede0cd9a61fb5303748e4c9e6f4ce37def7295fa171c80940db7083f7b0ad19be4be3aef2573dcad2031f9393b7d6e498970f4c7b2d3fa9af5c1f507c648a48c25a041f64c1984180c5c273c283331483ca04395cc1f1f948fbca9883d2f15150d6a9109bc91b433bf8fdd8acb25153434a030507e6776ad2a83ae2978f16d2264258b2e20fc1fb6682c5dfbb2d9f7a6dc61793b39a68cc430ad25c6cab5a160e8db4161ae70c5fee38a0ba889d49dbe90c003221da53e5f7b2d57fd7283ef59585c350bbca56bad81f4a6f071f04eb875f5409b256f8e906d79a07d0d116546369103ea02fa8209a05bf19a10d2c379cda58c531d692f23f2efd357caf9a53c83f79c92a0f8585c89329c4c3e887e087081832e81db5ade8bbb36f66293909a93cea7c472dd45ea13e6ccd3ebe621f9eba9abedf130961734f137cae54d09191dc014ec67241a13b24ec3ff5a72050fed76d7fd41189f0bfd987a5f584bad29219e4e23d77e983557a5964780bd75f794b2da7f178725d95d9cf10134df828996dbd5a8a125948cdb045226dc68f4ec67fbcd1795d19a491413e0dde903145c4c3bf914d6816f80238ffa300f2007d70208f568098628beba83f5a045c77d052b22f11b4aa134d82e4e981808443c1d8b2932134952179d23579b47127406ef428d704a2f2ef8bccd667c0429cb2480056145f165fe43a4335d5039bddc75cd0b20deb80d5e6ab84cc534f4a520d9a86057aaa8b2bb1a323c73819f76eb0d7e2c6ad66039b532d165bba34f0390fc5ef43121395b2776093334d554c800d9d0703944c072a9ec4be44f9514b53994c6b9812ef84cc1e397122c067cb8ef04f2f0bb1039f9951b139a4936e9ab3bc89c9cb69966405812a5ed60e5115151595ab5cea100f2f434460a57d62c7ea3290cfa8aa3877b9cbf894dd10b186e80f41a8ca9f21a3019eaa7a53c5008101a4c50fc8fd0c534f515ff3ccc17375f243515419412b1fabeb9e74d980ec1c55afbb2a55c737082c04f5f5bdd78110a7666a14316585210680880c980524d21091be250bcc8a9f0bbf32869f32d47b9ca2b0d5c47c2f4622afc272f3e05d90e5b9b068d0f43fb5d4cbee5e6a4c3a677947a32049563664d1e699b26e364f290c4a482736c05fbd0c7469f4b0539b16168d733f0f71c2334dd31176525cee6278b79a676fc8d622aa2cddf3ab8a75f0e5b7517bd5614cef1a51e6cc9af79440437f8747373e992155374a6ced040997d3cd65c6a437b0b448543258bb933d0f7734a440361bc9330890b69374221bb7a87bc46cc0e770bac95af72d810d0668a7390e29064a63432cf25e73f209ba853be436eef4bb2a843cc2a6da5d21497f5d51ccac71c142a39209717843e9942a048e4918d7b051495164c2a64ae03547afe62ce9c102dee23abb21c93a95d3b513565671d4ad09e2b603b16b864233c68c1a12e1652afcc7a8ae8b7aa25df4ba08b60c7297f2a8d9d9225ed337ebccceab4b1065c36a9acb965bc8cf2c12a766696b4e60fe3b73429c8831306c70a627c86e9dc9535e8812177826474b65f8cc39c5985c754b49bc1945b1aa46eac4d80e703d66f67fec7890cd75be04a4fef3012b525de4ad323484724d9617220432a7a9aca8d8b7dd633bb8f7659610efcd0d144bb7e47222e3d1dd4f0b9cc57d7f50e4e76c7fa07c3cd902dc29fde8c89568f66809da19e9fc94de2c031760a47e31c5ae02489b2f301567218cd8ae366e94e2fd198691c061e6e66a26e5a6b18e5ca54de1c310380b155a099fc70c671d46f19ef778f2a5e070e525858e3b26e569e8662f6ee100493416078e3cf9c83619ed6e3c32804aa8a3472354fb8e6a4a69c3d06239cf0ad4eecf281caab90c6425155f41cb589ba15c1e5860c450f4b80827905a3d78da8f01cf1ed07330fc32da893462357294aac1e9fb2a37a906de75ea3e7940a5012e87f7941be671424e1fa1a086cd2ce4be5f3a7fe3e443ddfb4d4942892e445a3ea8ee66fdf9b2382ac01ad8ac2aaafb1b464d2f49c284836874a78bab70baa4cd10afc0fa9612b65326a250bccdbc9f969ebfcf671182391c04e03daf48733b3f33df4b191710f8783ba79c5239f94f778447bfed2015adbd93492323355fd4c902ad79de48f16e5a0a21021ed943daf1660c878aaccd650e56451a9531ec35d2e2df59179f48c062c9a0c76aea99754d1beae054af76791587d689effd7523dca224bf674e8fb87ec8a2dcb8228b185c49b17572fce000ac5a520f2054aa3ad65c7de79306a816181e6e9974f7376b8092b33a9512a707885cfd6a998d324a4d594d549d782c631f84826cc66be98eda50d6cadc07b33ffd89300763f167f87b1a27f9ac068bba47668bba40c49196f6c6ea2ed37e9fea00896dd42c0aa2bd12936c947aafbb40bd3e1cf400f6ca76be02c24a07d56aeac4c35419572cba253054046dd41c10754a37674e224c8aa7bfa17175623b1b539011d850751a076c8b208bbd560e0fd2bac1def117a55843a6a651b91693b660bf4ee18d81cf4580a3f4323675736562de04ce5ee4bf1be8caa10ed2608833b6f23877a31ff609c98aa43d67c8f2e5d51df884f01081bde71ab30c5b951df00e05141684afd85a962db643513c7f540d57ade94978130a8abbbb720375de2d8d7000748df855f7809f969a31679edaed2165cb29ad19d7daed847ca2502be266ccd364f4968566ce6da988e3759504276512d881d2bc8d0944896288bdfcfb43b26ef6d5f7c99f1098c5e5ca92047ad2b489bdc009aeaf5d8efc8e86cc23a689c6a76c8644a607f8feb5a6de208927b90a7673dad6740178846ad3e85227fa0bb29389e06c66a6b940ae187f6f14734623aafa847b101522a2c84fc57fea816857525d8a71d25a155446674c5f395a099761af9e5b3e6eec1f63c39957f7bc8177be427d9757ea5b1ca9fc27e98170abe2a9c4d9ed1945715dc2641a87dea09378572bb825605686e9c83cea94968c5a183626355de3a35bfc2a3dcdfe09e462539cb88e8b6448dd6d8b149992be9e905720c7ef7881cb349c8a86eee0de17f07507ffab17124da48d1233d3f0efd4513f7fa02d1721adc3081f1efbd05595b071b71208e67ce76355c271059f5613135211087bcd2f252fa34bf08aed391bf32fa1f4475d3be8ecb6cc511c0ef886b61e490422f23e34e259c58072d5d3c915324a7dd7cc3e6c8c82bc547feeddd231724e5dcab4fe0dad803accebfdfefe73cf818f169f2ddd27b60f6cba752b3b4ea674565e714c49182816807f11ba242edceb8af6bb05639f3013d1a7b5687cf6b8ef0c64ca11ffaa0c9e2f5e6304d510cdcafa39f3f475c091d97fca1897b15b654758436d7da3fd2d3b71538e5b073b98f9b3a7f4a36457503e50a341636cb26721fb9d4da74d138e7c6d7511c67590c8ded3d7d5825b55d8c9f24fd1c6b335f8fa08003cd4f96867996dd8f1f0fde9754604500561c7cb794b604b7b3452ed5e6b009a1bf107931ec7d5e6d3bce39313d6aef0d1c4bfc4c64d8d5829c8264d68eacb91613516d671237eb147e16f5399833daab868fca28bd2b8f607e9fb2e281adc50945947b115e545127cea2184a079144584541e966365f55ef068d1a2fd8d5198c53e7b5c24349638de2bb4f1e602fa9b04793537cdcef4b0f849632e9540c6517acc7df7fa040c23cfaf643f8a32df68db60db4048151d8e62d64af8cbb85f655a09171898e1aeffa4aa0018adb2c1da15b792f8439477c08ce8649ead38881ee6638f73bb13c7a8aafde4e470a99f82f527f269cd7a9447069272583a9da8b0f12b03a9184ce48a2e725a2b8d24b22d70836bd3209474026f7e4b061fab8b6233a8bdb3f5a7196e456f96b68a06f99bfe64ce752e23616895625d4ab3ebb617829cf94c4f4d2c6e3631b89b555895e2a3bee993f8b5076f912c429ed339b044dc562bf4b19ade894badaa7ce54a13b2dd7bbc9d8386ead478900d73a5a8e4e164b973c1e263e0d2981c6bf154f1d4bec4ae2b22287550952164e1d33afa35ecc9396b9f0d4e31ca94b16ea5791328929fe75900b45e83faf191e0e67de80d8456d91e5b7b15010b8d614a1a8a5adeee832720dd27f5ac141adfe8a69d040143165ecfbb1ed403998aa107417a283f432459f2cf978cbb8d1117f49dc37d1e59a4e4d20ef7ecc8f75bdbb3402334c79cb566eba57298070d11efddcf72e5681fab1480991ea1e7f26d66b9e3ffd343800597f00de2565a6ac1b2120dd875a437433b885cf18ba8833f0b03161987c39ba9ddf2d216419d0e34e977b1855d68c2c7ad17412d668df9508f05c7e4d789b5b69421a54021e649bdae8af8e7f5d43fb3e51edb65596dce915c23115a44a9b6a6247e3a0f6fcc0aaabe69c4ec209335e3eb84ac559736988680c87b5678a4ee45b5dbe761b64449b49fef96b04563bcebd7986ee5f96100e52316815f822d91d8757f71c17063f1645f144797dbe3942d0e734501ce2e8a3fdfc1ceb9879f15cc5b869d8a0384fbd2eddf9c824089aa1fa251fcd3a3a07b2c85478ed092d5e9ca70351a14057b3bdda6d48f08829a21a5dc8f84871187aba722088b7244bf7dc74e1cc42d867274eac205672c87e229e3951bbb21ba0ef558a6a692a77808a96f459555c795d2af25b1634db3c248b4b6ad871b2efacbbb808f1504d6478ad946238047e5a168fd77ab8515636039cd6e7458174c59803ba95455150fe191c294725a4d0ec6b20330eea6e70d006c3c53af60cd872bde024c5349bf2d721346f4cd7f7d515d06c7b4c91f9ba516bd714471ba9d82404f9fe75f1cc4d0d4083138a8752be5d0cdd990e296bc3a3473824b4c3751e5a252fc1dd04079496c8ab8425830abca52635fef11a30cc8ef74584f27ea93ebcbde19bd319348afaad3298168a3064b679ea21d0d6bc566ee173cc2d8dba02f1500f8ad17b15ed9d7611d48c6a9b78a2335a28b8fd8958f8387c5dc97092b98212ffd15e2038f9f5bcb1683d664a347ed47100d5d446a0fc5d1ad9e31449d42908d2e8ad8f196728b6f0e1ba242f9a32607edab5e5e87ea3e5725fdd6bc9ee9dd93d664218f84f8a6e04f555e724a6d96b451edcb523d8ab428d50e1ccf4bc8a759f11e3404b06ec0ac061a4681870f143a02ebb404df0c8634dae41c0eacd3df565746ca8104633ecc64156616facf688a0d3e7257f4caa503bc164773da75439f5f35b403e100d3eb19a6b98646c1b1bcfdba77952c99dca27e93c6f48632f0fae9d0b79d09756dddca1e2b1f5c4a200582a99cc8439e1367cf0129c798ffbc6873c5239ebb57847fffa2325a9d2093167547b16f593abd7b9e2bcc1bab75b8bd65825d4e821d1e9954216334833f1d2cf2eaf57e95c01905dab8d5d33846f868639554ec250ce5af9c1dc35b58a2bddc6ac56f57fa190cad14daab26ca0b3ad1af0fa3d9d0cc99bc2e740a9ada256c428ea86998ac0cdad0c3e47119a4046c9c1d08946e09a5835d981aa37296d19b567fa28", 0x1000}, {&(0x7f0000000780)="2b77562a39151a071cacfba9200b8eb16875f8b0e6453f44e4cccddf2dbdfe464ad0c2ae86d8d63545f943351838757e65c77983e709472a13746c04ddc9b00f16d103ec917770d729fb3f9410426c2aebd13a73c133445e339c8bfb2f043421032ef123bc8c8919c89bffce1b6519927964490677645ad69cd85f9566befc8efcb16bb4be994404", 0x88}, {&(0x7f0000000840)="445982aa8c5c565cdf65c67e60de908ac87355a17619176e88c0bf7204f0d36da347e3e2e40a34287336bdc1e9fe59a7570f11a430324227274e9738a7db3b6797286ce21d18a29e5db7452a0fd40ed5d2ee8395954546f88b57d36230b45596860bbe92807c7f154aa492451914b8ca97a4cfe6dcf7720ebd95f30b5276ec9e148a417e433f1b58104e68b04c689b87b08e098a3197dbd5d51baf34dc1e213210f8250c89b44ec61896aa7fb0a08a1820eb3b1120c1f2185b50dcc5d29fb386504429d09c19d732a854a9e8611aca2afbd55e33348e387f7b34ac0182549910f7a43f4a670eca6f48852c387fa2696fe7f39b", 0xf3}, {&(0x7f0000000940)="b526ae7db50caf0f92ccbbd6a5cf0acdad4cd74c22065f20c6159abeac4c47568340994eae2aae708d2e954143ecf753f5b85139b583140549fe0670cc1dc31a86243b0faf4dbcb08596fa90fac61d77313c4b4df86942d94290e3ae1d008ef5d2855b1f72fd859aaa66faa7d6a5667fdb880ebfa0065402848446def51a9410da2aa3a7d817b59f9af11fe56620b537f134eaf24b7e36303c98f40a0ae30f0d106903c3bb0964f9828b81ed2b1654cd59c2157fc9528aa1460bb9a983e6da37c18c0d2a30eac679625aa166ccd66a559a74c292794adf8807aeae675fb2fc136f02", 0xe2}, {&(0x7f0000000a40)="b1040e15734a07630f9baa87e866c174f0e54f21783eb5a3869538d178f6215b617d79e69e8720681a168c5c380eb7c5df1f247c96a98486b4e6dbd19ade4fbdfa305a5f5a25dd2ad7371991f701cd930d5d4afb885d997665ef25451975ddc2cf4cb00517196b895e9728648c9c9f", 0x6f}], 0x8, 0x3, 0x1, {0x3, r5}}, 0x3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1330.375013][T31108] binder: 31105:31108 unknown command 0 [ 1330.380707][T31108] binder: 31105:31108 ioctl c0306201 200001c0 returned -22 08:28:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x3, 0x2, 0x5, @mcast2, @mcast1, 0x7, 0x700, 0x4, 0x5fa246fc}}) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000640)={0x2, 0x4e24, @private}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000000)="29cad8841fd8739aaccce4865999d3626e815b6850ce3c2f749c917aabdb7de7eec523970024b7dc1c93c2bde906eddb93b8670ba030a01402b7d6b847e77bc1677492ba2db786b66d88aac2368cecc99bc8f82024dd8781b14fb96309a223138ecaef0838746635a7eaabe95e388c9ab492adb28e4233b449859a096777592be2a88a5a15c02eec3df5c8a89dff99cc45db0e3cd7d09d16b163974047bef65cef9904377fc5cccaf02d8e7fc53d58af4a0127782b70f6f17234718f894aa55c495006", 0xc3}, {0x0}, {&(0x7f0000000900)="06", 0x1}], 0x3, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010101, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x50}, 0x24048880) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r3, r2, 0x0, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r5, r4, 0x0, 0x3) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast1}, 0x3, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="ff0dc791ba01afb3805bb28de94e0082be913e418740c95366b7723dae8f8f0b1699f8fbe2dc847409f97ea4dd85d815459e7f24c10793c34d58be40d01de90c8411c0090645eb0781d494ef52770fa02f23ee4d2fa92c5b0a935f7ca91e8b785d8a93dd50fc4e6e72c54285e351a7b5f2dd22ea5efa96f68cafcaae48d1f8f523f3069ae72259b908c5f9fb73af2ecde6412c6a06533f3ffae75aab333efa28b6a7019fa49d0029e63b91bd5f49e5e7d7750301a07396e209b3ac", 0xbb}, {&(0x7f0000000380)="a1e338a62feb0dcd79aed75b7e32400e75a21f60f881a5a75f796272e2909fe8540590b1d9526b672a935ee0a0bdc2a472a48cfdad10588e12887ff5c67b75b04ce030de6936db2c16cfe13bc704616dfb26959ecaa49a86cb68b134b77b97d7a6f3109d17cf9728fc3341199324c0a0e91475ca5086593e07e549051072085ab2a9be6b261a22578222f1951becdb5c6aed03791269f5061bcee33c549ab6dc34caf8958cb0fc7c0f137e963f72748e3f8afe4c3c74a015ce56413f1b520b83f34129d5c23902e9461c27568a9137dc5d21ff700e", 0xd5}], 0x2, &(0x7f0000000b40)=[{0xf0, 0x3a, 0x400, "c6241f3e0313b00fde22ba99171d17ca663b5922dc76c3cba9c73593d252ad53f1258f069599a2ed930322e0876b3f54bdad2c13103f8a1906c1e6da00b14c8739865714486cfc50e8f87276a5b8ceea4d5a89221271d43a71f0d5de4c89149f03f64195401f647aa73320c92597484daab4e1332fa0f16d15aa8bc7d04c6815b5be021f1e234f2b0f485a5a3b9f633176ec7fffbb4d9a0c035e25e6a90ed258a8e95a816ac8fef4ec23aa8f00c95bde4f4091e262670b80b9dd414a176afbca0acd6ba4ba9c2a96c93ee8b75ef25c36d613f1c6d076cbf1d3ed01"}, {0xe8, 0x105, 0x6, "e49938dfa9fa834195ad9475e6975aae20e9e132bf7a154aded02b6692ad1b3cfaa880ae3428f6cd4c990da70f8c8840461274a8aba8b637a7914f3c05518d18dd48c530d03d4f1f25fc21496c9cdbd41ad6aa5f45eea5cf85cc18058414797015a7e7f378f240d99753435457fb1b376c9f5c5fd08af1f78a4bf9ad66f8d039bac623ff18a1a46ad7774ad311104c08c2ac5e3d7838b7825be206fb70a056b90069f0ac61965a656298809631bcae30ae5fcc503d84e153a993192e3acac602988a350c7f6900786d09eabec46f62d4f77031a7c5142a6d"}, {0x20, 0x113, 0xffff, "c56fa454360d6bd1e2"}, {0x80, 0x109, 0x2, "3cedf9118f5f15948deb181021747da05d580ad4dd5f31ec538b8d57a406c41cdbc3b89e2a90d372b7180dec5b4529701b65adb367ba2c64f871c5a0153ae52472dc5f18a3e681001780d010c0e41f49cc05fed28e57585d100c1e729af209403966422478d3fdd3b8323cd51b6d"}, {0x1010, 0xff, 0x6, "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"}], 0x1288}, 0x10) 08:28:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1330.529562][T18861] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1330.604333][T26954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.612433][T26954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.621624][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1330.836947][T31121] binder: 31117:31121 unknown command 0 [ 1330.843067][T31121] binder: 31117:31121 ioctl c0306201 200001c0 returned -22 [ 1330.949947][T18861] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=d8.41 [ 1330.959537][T18861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.090849][T18861] usb 6-1: config 0 descriptor?? 08:28:56 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000580)={{r0}, "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"}) r1 = memfd_create(0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="f476b9805e90eb567aa273c9f6773587", 0x10) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x3c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r3, r2, 0x0, 0x3) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x401, 0x6e, [0xdc, 0x1, 0x7, 0xff, 0x3, 0x5], 0xa, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/110}, &(0x7f0000000080)=0x78) execveat(r1, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1100) socket(0x0, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0xfeda) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x2275, 0xfffffffffffffffc) open_by_handle_at(r4, &(0x7f0000000440)=@orangefs={0x14, 0x1, {"01bb54b9e20b19eb8890f246bf2eff57", 0x6}}, 0x10000) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140), 0x10, &(0x7f0000000640)=[{&(0x7f0000000280)}], 0x1}, 0x0) 08:28:57 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1332.033036][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.041197][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.050199][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1332.088951][T18861] mos7840 6-1:0.0: required endpoints missing [ 1332.105186][T18861] usb 6-1: USB disconnect, device number 36 [ 1332.808754][T26895] usb 6-1: new high-speed USB device number 37 using dummy_hcd 08:28:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x1, 0x2, 0x2}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x0, 0x0, {r1, r2/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0600"}, 0x0, 0x2, @fd, 0x7}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x189a149b, 0x80000000}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffff3, 0x3, 0x0, 0x0, 0x0, 0x3fffffc}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0xde921000) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3}, 0x100) write$binfmt_elf64(r3, &(0x7f0000000600)=ANY=[], 0xfc30) getpid() futex(&(0x7f00000001c0)=0x2, 0x1, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x3f, 0x81, 0x0, 0x0, 0x7fff, 0x40, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000480), 0x8}, 0x0, 0x5, 0x3, 0x5, 0x6e5, 0xc705, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 08:28:59 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:28:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:28:59 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000480)="78cb98070bd6b3829a0adae93f3e0309349d242a1ab7d1da86a8ef2d24e35bcad58fdcc6250f3f3ae80b147e9180e642450a412ffe946d9b2640aa338127f8a56c336cb602a21282b80fa2d2bacdf0800da9f83c4ae46ee3c846b5e4bf726a6cbe8cd83677a61afe7ec2b313f7401b2a1aa6d86bd17c87717dafb0d4086a1746bee817e23a401639146d5746ae437a51c8ebb903789b7905590f11620bc1ceea70d6c0621bc8b95d687ecad9d2935826ee92f1630dc548bfb379cb27c73219374fb7e927a086672b59f3845904f3a45af3da593e9df3a0387e5fd42aff7b13", 0xdf}], 0x1) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:28:59 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x1000002, 0x640080) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x0) fork() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x56, 0x7e, 0x8, 0x0, 0x1f, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x120, 0x8, 0x1, 0x5, 0xae5c, 0x2c2, 0x1ff, 0x0, 0xffffffed, 0x0, 0x1}, r1, 0xa, 0xffffffffffffffff, 0x1) 08:28:59 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1333.249350][T26895] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1333.257044][T26895] usb 6-1: can't read configurations, error -71 [ 1333.326264][T31166] binder: 31162:31166 unknown command 0 [ 1333.332321][T31166] binder: 31162:31166 ioctl c0306201 200001c0 returned -22 [ 1333.589273][T26954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.597233][T26954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.660285][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x25, 0x4, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000008480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000000d11f069eef560a1fb355e3508865fb948ebf3db6fa998d72d7ccca3a0857e4100511c901d80c95efc6e4ced5543bf88bcd44673509fbb092c80dcccb45ffb81211e508", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000c0000000000000002ff0000"], 0x44}}, 0x0) 08:29:00 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:00 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000013c0)=""/4089, 0xff9}, {&(0x7f00000000c0)=""/207, 0xcf}], 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 08:29:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000005ec0), 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x25000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040), &(0x7f0000000080)=[0x0], 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x9, 0x9, 0x0, 0xad4, 0x104000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x815, 0x10001, 0x6, 0x4, 0x3, 0x0, 0x1, 0x0, 0x8ff, 0x0, 0x2}, 0x0, 0x8, r6, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r7 = signalfd(r0, &(0x7f00000000c0)={[0x9]}, 0x8) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000440)={0x7fffffff, 0x1, &(0x7f00000002c0)=[0x5], &(0x7f0000000380)=[0xfffd, 0x3, 0x8, 0x3ff, 0xffff, 0x3], &(0x7f00000003c0)=[0x9], &(0x7f0000000400)=[0x0, 0x0, 0x200, 0x0, 0x9, 0x3ff, 0x3, 0x7, 0x380f]}) openat$cgroup_devices(r5, 0x0, 0x2, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x4000, 0x9, {0x0, 0x2710}, {0x3, 0xb, 0x81, 0x2, 0x1, 0x40, "ee75240b"}, 0x4b, 0x1, @fd=r5, 0x9, 0x0, r2}) [ 1335.109118][T31189] binder: 31187:31189 unknown command 0 [ 1335.114808][T31189] binder: 31187:31189 ioctl c0306201 200001c0 returned -22 08:29:01 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf5ff}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x10010) 08:29:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1335.354176][T31197] binder: 31195:31197 unknown command 0 [ 1335.360363][T31197] binder: 31195:31197 ioctl c0306201 200001c0 returned -22 08:29:01 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000680)={0x9, @sliced={0x200, [0x6, 0xffff, 0x8000, 0x65c, 0x31d, 0x1, 0x1, 0x81, 0x5, 0x199, 0x7, 0xc30, 0x4, 0xfff, 0x5, 0xfffe, 0x7, 0x7fff, 0x0, 0x81, 0x7, 0x5, 0x4c, 0xeee, 0x8, 0x4, 0x7, 0x2, 0x1, 0x100, 0xb6d1, 0x3, 0x0, 0x0, 0x1, 0x5, 0x5, 0xbaf, 0xb7d, 0x8, 0x1, 0x1, 0xffff, 0x3, 0x39b, 0x101, 0xff80, 0x1ff], 0x4}}) dup3(r6, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)=ANY=[@ANYRESDEC=r6, @ANYRES64=r3, @ANYBLOB="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"]) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x20040800) 08:29:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:01 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1336.004615][T31209] binder: 31208:31209 unknown command 0 [ 1336.010411][T31209] binder: 31208:31209 ioctl c0306201 200001c0 returned -22 08:29:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:03 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:29:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb63, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:04 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1338.196411][T31225] binder: 31223:31225 unknown command 0 [ 1338.202278][T31225] binder: 31223:31225 ioctl c0306201 200001c0 returned -22 [ 1338.355214][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.363282][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.371100][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1338.956825][T31216] warn_alloc: 23 callbacks suppressed [ 1338.956847][T31216] syz-executor.2: vmalloc error: size 8916992, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1338.981190][T31216] CPU: 1 PID: 31216 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 1338.989648][T31216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.999720][T31216] Call Trace: [ 1339.003009][T31216] [ 1339.005972][T31216] dump_stack_lvl+0xcd/0x134 [ 1339.010589][T31216] warn_alloc.cold+0x87/0x17a [ 1339.015291][T31216] ? lockdep_hardirqs_on+0x79/0x100 [ 1339.020508][T31216] ? zone_watermark_ok_safe+0x290/0x290 [ 1339.026085][T31216] ? io_schedule_timeout+0x180/0x180 [ 1339.031397][T31216] ? policy_node+0xf1/0x110 [ 1339.035927][T31216] ? __vmalloc_node_range+0x574/0xab0 [ 1339.041320][T31216] __vmalloc_node_range+0x883/0xab0 [ 1339.046550][T31216] ? vfree_atomic+0xe0/0xe0 [ 1339.051078][T31216] ? vb2_vmalloc_alloc+0x11e/0x3f0 [ 1339.056205][T31216] vmalloc_user+0x67/0x80 [ 1339.060554][T31216] ? vb2_vmalloc_alloc+0x11e/0x3f0 [ 1339.065684][T31216] vb2_vmalloc_alloc+0x11e/0x3f0 [ 1339.070640][T31216] ? vb2_vmalloc_dmabuf_ops_detach+0x190/0x190 [ 1339.076809][T31216] __vb2_queue_alloc+0x60b/0x1180 [ 1339.081898][T31216] vb2_core_reqbufs+0x80f/0xdd0 [ 1339.086781][T31216] ? __vb2_queue_cancel+0xd20/0xd20 [ 1339.092007][T31216] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1339.097577][T31216] __vb2_init_fileio+0x33d/0xd00 [ 1339.102544][T31216] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1339.108380][T31216] ? __io_queue_proc+0xfc/0x8c0 [ 1339.113256][T31216] vb2_core_poll+0x498/0x770 [ 1339.117869][T31216] vb2_poll+0x31/0x160 [ 1339.121967][T31216] vb2_fop_poll+0x10e/0x390 [ 1339.126506][T31216] ? vb2_fop_release+0xc0/0xc0 [ 1339.131334][T31216] v4l2_poll+0x158/0x220 [ 1339.135617][T31216] __io_arm_poll_handler+0x3a1/0xcf0 [ 1339.140944][T31216] ? v4l2_mmap+0x280/0x280 [ 1339.145395][T31216] io_arm_poll_handler+0x322/0x800 [ 1339.150549][T31216] ? io_write+0xbe0/0xbe0 [ 1339.154902][T31216] ? io_poll_queue_proc+0x50/0x50 [ 1339.160044][T31216] ? io_submit_sqes+0x6f0e/0x8a20 [ 1339.165108][T31216] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1339.170417][T31216] io_submit_sqes+0x796a/0x8a20 [ 1339.175326][T31216] ? find_held_lock+0x2d/0x110 [ 1339.180107][T31216] ? io_async_task_func+0x550/0x550 [ 1339.185337][T31216] ? __do_sys_io_uring_enter+0x324/0x1f50 [ 1339.191202][T31216] ? __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1339.196958][T31216] __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1339.202542][T31216] ? io_submit_sqes+0x8a20/0x8a20 [ 1339.207599][T31216] ? irqentry_enter+0x28/0x50 [ 1339.212298][T31216] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1339.218474][T31216] ? lockdep_hardirqs_on+0x79/0x100 [ 1339.223692][T31216] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1339.229884][T31216] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1339.235449][T31216] do_syscall_64+0x35/0xb0 [ 1339.239881][T31216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1339.245795][T31216] RIP: 0033:0x7f9f05eddae9 [ 1339.250220][T31216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1339.269844][T31216] RSP: 002b:00007f9f03432188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1339.278290][T31216] RAX: ffffffffffffffda RBX: 00007f9f05ff1020 RCX: 00007f9f05eddae9 [ 1339.286270][T31216] RDX: 0000000000000000 RSI: 0000000000003ea0 RDI: 0000000000000003 [ 1339.294248][T31216] RBP: 00007f9f05f37f25 R08: 0000000000000000 R09: 0000000000000000 [ 1339.302229][T31216] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1339.310205][T31216] R13: 00007f9f06524b2f R14: 00007f9f03432300 R15: 0000000000022000 [ 1339.318205][T31216] [ 1339.334393][T31216] Mem-Info: [ 1339.340850][T31216] active_anon:63 inactive_anon:214505 isolated_anon:0 [ 1339.340850][T31216] active_file:6341 inactive_file:53452 isolated_file:0 [ 1339.340850][T31216] unevictable:776 dirty:110 writeback:17 [ 1339.340850][T31216] slab_reclaimable:21074 slab_unreclaimable:103077 [ 1339.340850][T31216] mapped:62840 shmem:7659 pagetables:6133 bounce:0 [ 1339.340850][T31216] kernel_misc_reclaimable:0 [ 1339.340850][T31216] free:1152622 free_pcp:8893 free_cma:0 [ 1339.383615][T31216] Node 0 active_anon:252kB inactive_anon:857108kB active_file:25364kB inactive_file:213804kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:251360kB dirty:436kB writeback:68kB shmem:28188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 745472kB writeback_tmp:0kB kernel_stack:14424kB pagetables:24528kB all_unreclaimable? no [ 1339.415761][T31216] Node 1 active_anon:0kB inactive_anon:912kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1339.444799][T31216] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.472146][T31216] lowmem_reserve[]: 0 2647 2648 2648 2648 [ 1339.478835][T31216] Node 0 DMA32 free:642716kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:252kB inactive_anon:857172kB active_file:25364kB inactive_file:213804kB unevictable:1568kB writepending:504kB present:3129332kB managed:2718876kB mlocked:32kB bounce:0kB free_pcp:35484kB local_pcp:16780kB free_cma:0kB [ 1339.510322][T31216] lowmem_reserve[]: 0 0 0 0 0 [ 1339.516293][T31216] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.543052][T31216] lowmem_reserve[]: 0 0 0 0 0 [ 1339.547929][T31216] Node 1 Normal free:3952160kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.577627][T31216] lowmem_reserve[]: 0 0 0 0 0 [ 1339.583217][T31216] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1339.597696][T31216] Node 0 DMA32: 3475*4kB (UM) 4876*8kB (UME) 3151*16kB (UME) 1484*32kB (UME) 780*64kB (UME) 219*128kB (UME) 73*256kB (UME) 38*512kB (UME) 21*1024kB (UM) 1*2048kB (U) 86*4096kB (M) = 642716kB [ 1339.617795][T31216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1339.629854][T31216] Node 1 Normal: 172*4kB (UME) 56*8kB (UE) 31*16kB (UE) 178*32kB (UME) 74*64kB (UME) 38*128kB (UME) 18*256kB (U) 5*512kB (U) 2*1024kB (UE) 1*2048kB (U) 958*4096kB (M) = 3952160kB [ 1339.648674][T31216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.658709][T31216] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1339.668169][T31216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.677868][T31216] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.687380][T31216] 18872 total pagecache pages [ 1339.692298][T31216] 0 pages in swap cache [ 1339.696816][T31216] Swap cache stats: add 0, delete 0, find 0/0 [ 1339.700897][T31241] binder: 31235:31241 unknown command 0 [ 1339.703236][T31216] Free swap = 0kB [ 1339.709061][T31241] binder: 31235:31241 ioctl c0306201 200001c0 returned -22 [ 1339.712500][T31216] Total swap = 0kB [ 1339.723490][T31216] 2097051 pages RAM [ 1339.727373][T31216] 0 pages HighMem/MovableOnly [ 1339.732194][T31216] 383923 pages reserved [ 1339.736465][T31216] 0 pages cma reserved 08:29:05 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, 0x0) 08:29:05 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1340.045349][T31249] binder: 31243:31249 ioctl c00c620f 0 returned -14 [ 1340.869168][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1340.875505][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 08:29:08 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x9a, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) io_uring_enter(0xffffffffffffffff, 0x6374, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000017819f60024000000000000ddff", @ANYRES64=r1, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000040000c000500080005"], 0x3}}, 0x0) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd63, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:08 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:08 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) [ 1342.344493][T31279] binder: 31269:31279 unknown command 0 [ 1342.350270][T31279] binder: 31269:31279 ioctl c0306201 200001c0 returned -22 [ 1343.691074][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.699133][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.706892][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000017819f60024000000000000ddff", @ANYRES64=r1, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000040000c000500080005"], 0x3}}, 0x0) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 08:29:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1344.133363][T31288] binder: 31286:31288 unknown command 0 [ 1344.139207][T31288] binder: 31286:31288 ioctl c0306201 200001c0 returned -22 08:29:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000017819f60024000000000000ddff", @ANYRES64=r1, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000040000c000500080005"], 0x3}}, 0x0) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:10 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x131e, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:10 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 08:29:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000017819f60024000000000000ddff", @ANYRES64=r1, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000040000c000500080005"], 0x3}}, 0x0) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) [ 1344.642706][T31298] binder: 31297:31298 unknown command 0 [ 1344.648539][T31298] binder: 31297:31298 ioctl c0306201 200001c0 returned -22 08:29:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000017819f60024000000000000ddff", @ANYRES64=r1, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000040000c000500080005"], 0x3}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x131f, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1345.913115][T31311] binder: 31310:31311 unknown command 0 [ 1345.918969][T31311] binder: 31310:31311 ioctl c0306201 200001c0 returned -22 08:29:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e13, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:12 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 08:29:12 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 08:29:12 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:29:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000017819f60024000000000000ddff", @ANYRES64=r1, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000040000c000500080005"], 0x3}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) [ 1346.755111][T31332] binder: 31326:31332 unknown command 0 [ 1346.760934][T31332] binder: 31326:31332 ioctl c0306201 200001c0 returned -22 08:29:12 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000017819f60024000000000000ddff", @ANYRES64=r1, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000040000c000500080005"], 0x3}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) [ 1347.286319][T31341] binder: 31339:31341 unknown command 0 [ 1347.292140][T31341] binder: 31339:31341 ioctl c0306201 200001c0 returned -22 08:29:13 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="8557336af08d045c346b8127ffe20b1b333b9c31", 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f13, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000017819f60024000000000000ddff", @ANYRES64=r1, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000040000c000500080005"], 0x3}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:13 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1347.867729][T31353] binder: 31351:31353 unknown command 0 [ 1347.873518][T31353] binder: 31351:31353 ioctl c0306201 200001c0 returned -22 [ 1347.878481][T24216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.888715][T24216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.897621][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:14 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd_index=0x5, 0x0, &(0x7f0000000480)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x7a}) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) r4 = signalfd4(r3, &(0x7f0000000100)={[0x2]}, 0x8, 0x1000) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x4, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0xfffffffe, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:15 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:29:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:15 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:15 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:15 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) [ 1350.031029][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.039242][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.047046][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1350.074755][T31387] binder: 31376:31387 unknown command 0 [ 1350.080512][T31387] binder: 31376:31387 ioctl c0306201 200001c0 returned -22 08:29:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1358.694152][T31406] binder: 31405:31406 unknown command 0 [ 1358.700373][T31406] binder: 31405:31406 ioctl c0306201 200001c0 returned -22 08:29:24 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:26 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:29:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:26 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1360.864247][T31421] binder: 31418:31421 unknown command 0 [ 1360.870040][T31421] binder: 31418:31421 ioctl c0306201 200001c0 returned -22 08:29:29 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x80) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:29 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:29 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:29:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1364.281626][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.289593][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.347631][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:30 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) [ 1365.106597][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.114615][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.123947][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1365.365838][T31442] binder: 31438:31442 unknown command 0 [ 1365.371665][T31442] binder: 31438:31442 ioctl c0306201 200001c0 returned -22 08:29:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630b, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1365.606261][T31462] binder: 31460:31462 unknown command 0 [ 1365.611946][T31462] binder: 31460:31462 ioctl c0306201 200001c0 returned -22 08:29:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630c, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) [ 1366.269184][T31474] binder: 31466:31474 unknown command 0 [ 1366.274846][T31474] binder: 31466:31474 ioctl c0306201 200001c0 returned -22 08:29:32 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630d, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:32 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:32 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="086310400300000000000000000000000000000052ba11fe1c257bbdde999dd5226033044080b28e83c1502c1ff72d7a8ec16e949a733d67d2754ee5178d7bb2d2f34781b51732df550bacbfc5e1255fe99f67d19d882fcdf1839002107159f5c4e8f896b97ad2aa68e8f3cb16f64acfadc1848b123042227ff563fe0eab369fdd42c610355f43005eaf5148bad21bfab0430cdeb1a181625f6f8f0710309f90bbb2cb92dddb907931113bdb5cc42c7af03e93be27a2"], 0x5e, 0x0, &(0x7f00000004c0)="95f5dc67e028e43d67b1959a2dac307193424b3caa4b9bb63fb1547501da3610164a81d73b23c0342d8dadcf7b71d8f6591f2c93fd39806b7ac70924d4a365fe8073324813ed2cb8acbcadc086ce2317e376fcfd56da43df166c21ed9630"}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, {0x1}}, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1366.903814][T31488] binder: 31486:31488 unknown command 0 [ 1366.909629][T31488] binder: 31486:31488 ioctl c0306201 200001c0 returned -22 08:29:33 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1367.370634][T31494] binder: 31493:31494 unknown command 0 [ 1367.376677][T31494] binder: 31493:31494 ioctl c0306201 200001c0 returned -22 [ 1368.424104][T31505] binder: 31502:31505 unknown command 0 [ 1368.430119][T31505] binder: 31502:31505 ioctl c0306201 200001c0 returned -22 08:29:34 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:34 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:34 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:34 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2ffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="ec6a8140966eb57bd49fed5dcc3327216c169d7348179200a0b600000000", @ANYRES32=0x0, @ANYBLOB="e30d00010000004000000004460000180065000000009078ac141400ac1e010189034800"]}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000002080)=@newtaction={0xd47c, 0x30, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{0x12e8, 0x1, [@m_csum={0x10c, 0x1e, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1d, 0x9, 0x0, 0xfffff801, 0xff}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5822, 0x6, 0x10000000, 0x3d06, 0x8}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x6, 0x6, 0xfff, 0x8c7}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xeb6a, 0x7, 0x3, 0x83d00000, 0x3}, 0x35}}]}, {0x6f, 0x6, "d67dbb0a34322dbde50ef1df74d4e248f9edfa00ce5133833e8b14b26d6fb2c09ef9d369779d354e5e49cec16aa1e7869942c637c948a18bc7f5d534247ea44c08b1fd06e336e6bb2619154216473f94ad65dffb22a0dd01d0625c328dd152009da9db7162d27b03d3d919"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x70, 0x16, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8001, 0xfff, 0xffffffffffffffff, 0x5, 0x400}, 0x6}}]}, {0x1d, 0x6, "d8c784abdb4b900a3a9009d0942f93fdba9cfe2e1d0c737cb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x118, 0x8, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xffff, 0x4, 0x9, 0x3900}}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_DMAC={0xa}]}, {0xb6, 0x6, "76eb8ed9ac4cb25cb6357ea18d4113c6852326f0352ec73f6bb1a8ed3270f317e459632fdc2d230c829eadd8c7ff53094c8b6df49450e072a1a6a403a2922dd95272a94b51455bb5fda1cd0a79a9b2f84d7a7b455c5de706d5bba90c5d9ed9f52b2a83c0c8d70fe7e9a999482e07c0abebe97fa7c327d3058a3ba826d9e5c5b58120b7fda31fa0759c713b60baba382365e156976af5391c5d1bf6ba5166201eb1da994d542495a70afc8fc6dbb2edabd1cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x1050, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0x5, 0x7, 0x8, 0x1}, 0x2}}]}, {0x1004, 0x6, "288d0403df2d6bc1475657af2ae54d5c44f77df6ad561abadb65dbfb28fd58b8b09129c13829c67bfff39a926aaad83135437591734082710960ee9534ac3d69cfe2e383c63dad271d1d5431534267258c7d3d41a5b6deac03eec53344cf87341c597764c669e5ef3c4d3a3970eae4f334846f855fb1b4586d7007d6d5bed88dcf1a7c0d5e90fb40738cf94d41d4f3f1926274364d45ba413a40fdf769f69244fa20afdbec4ac212b3c4ffb03c521af2d515b636a2bb1b1234730fc4fc5f6a367c2e76dafc70eacde4189729c05feca5151ee7de1f9bd31cb49bf0b096a2a110ad1022c33886acb864fc7d548b591bc21f987f0168d1c27618b40978a0934188149700f9129244e015c24056b816c75bce7e488423cf4025e78750ecd48fb92f3e7eab8ac16230f89a1d437c47d2b9ca46c8ea52e3ce2cc9755062dc9558b7cbf5b6017affb8261911225ce688882f630542857fc6e7be40f2ce5fd5391ec38bbcf371654253d793c7fc40590cbf91eb9314212148f235bb4933872331f8706a14f895bff661e3fb4dbfe47534e394e12a1d7be607c98c87c3acf2fd29fba7d96a408d7d30f132ee29e87e2e71ccdc700ffe93c310300560da4f1fc6fd4eae6c10b2dd6772004b870f40db543bf8695ba60cca632c587087f425f523f063dcd2c84fe2164239e12eac631e91ef035a7c770f86f835c3625b55a2e1c672d990bb69de86efb02bf93b7ea8e409361936609133b4ca7b7aca925f78deb604c919248cf19d13d9a98c35251f7b8de9c34be97b1cc6279b4b10b8120c5c41419ed86a24fd471506e0fe8118d1b699bf447e66c4021ab9c7322e3bbfb1e76c4f038357f1094665ad31a80696497d8abb867a08823aea1ebc5c0eb2f8a3f869576477427cbdd65a4a0f6d35afe3c6f1ce0929a6ae898908ff78d3ec5b3c551821714d63c30da14123b5f1a9a417de464090213457a88233340e9d35ddef1bc3fef901f8c987625a2cf51f41ae15888fb1e242e2f080383c192659b9f81717b01314863875221a28f42799e314ed7336f8e3556e353d86305bfd7b1c6ea95a88888148549c26ea7343f7d5152054531e198dcc65d11f1528aacb3e2dae8d6de068a050b28e070eb13a6548afaaf7a19f16f16f2f4373d0bcafacc540d016d012308bd3f8f99edfffae480375b59061e89b5d60f802a4ffafe6c8561636214a572c01cc93fec4fc2c4b0c1244feff079f82165f51d5398e6a34ee578f8ee735521a74b5b9872ec5ab81ec55a8d03c203f3c112ebd0b6710ba2877d8e38611c05b4986d51f5caf0388c02591e40fb822dea150d552a6498d6729e2f5e37804ed1764041bdd27c90dc4860ba265321e48278290e4950ceba9ab4c62b169753539ba87224c56da863f2e9efc22a679dc8d4c94a7f6b055f10822f281ae5c9007eb9c319fbdc0afc3bab6228deca404edd8cb5464f2585230eafaa34858b0643f1b516dc7f9dc18ae878729f6534e6e8ae2a9d9d1fcf6bf596b3a0aabed3cd59f1b9203f2c4377f258a13f690db72a3efa8bf158a074a08809615c210a459179756d3c12b18c9d68993afdbdf04d5bf1a2a807063615ec6b38f77a6169e72bcddb60c699c3beb43724d6713c1237daf09751f15655e31d54d5661f692a567b42d7d62de147b53bb527c169a26f8f1b43dab7fa0c8ec99217668cabaef615195f62472e124a8c65cecaf3a99d2e98c2df58ea89dde0d9e1811e8ca2194bd9b092b889f8cfad26152e346f3baba97604d3b2708c4b1c8fadf638e3ea671e97de3cef5aebee20ab9bef6322cd8e32a53736e4d2c2d53d3146832f6eec5c0c3c99320b1d6c4555cbce0b58a16f0c28a06c6edcfcc33afa9ea5c50eba0ae82b04b65863bf5bd5f0a7119da826062a38e022a48d613765961f9750556e61071ac491cfe7730415edfa471f3f3da0c9825c4ad6ab570618d90eae9ebb13e7b1a0db2632cfb9321c016f066d564c9dceec548695e7dccfdd9cb7e5f132efd14d902f4937f1ba5abe95e58cfb54c04a9fa075af8151518bf3e0c7ef7bb0263dff13c2f12ff94d8806d5beb5e1ea2b4d7cd3460509d96a78940757d00ea56e428f16277746248a81d539894ccdebd69b6763d8ed7296ac4b0bbb8dec8629d6e6b939e1e720d96718e9ad024a9e3ec4f643856f83606ac96ff9434b1034b5e5c0fcdc7a3576085b2314930fbde76f67dfa6725f5e7dc483466a9eb69a78961d778a12cff3c00a756ee800583709c7f8a9cd0292928f2d2d09cb410606222fc74e110ff1f0916e408b3331911bc2fbb7873fc16b136f4c9cc9433b632d55bee962265498a04c9bc23375a6aa8997073db35ce687b3d45d5d5651db7d64ad1106f74ca2b9be885f180bfc2114ba4ea27248def4ba6e43b3e3130b23466d866ca0f144e531ef14fe9d743d808e3078b6ade43e3c7fc4a3d7f043be2cb229eee9549ca753ff03d07aa0043c42cb9ef4d516aa54c6e1181e9825d0d7b856de2223fb3fc5bdef2bb548b48d82c0e7331457937956384535b1e8d36397a34f29a12aea63fc589ebef5a788ebaa75a909db285f82ff95af499e50923913fe7490dc6401712b8032e206f7bd42e390a3d4ced7d1c921002793a63086c07b67ae5e7ffda26fb854e0cf81da191b2a76dce57954ed4580c64738d5742125b86488143b31e803836c6aad1e8cb8e22f1ef96e86072de59ac6b1077d495efd2e044c6f98411215de51ace02793b93346f8fd0b0cc32721203cc55e3bf9867d921bb8650fad037963a3967a45b6c7f8f1057a55acb40d7a83a130189a7bf4a65d3c3f2ceb9c9e6f850962a2845d0a0c552d231f703b7723890bea94fbbd4a8da0f438ccd1e4a6643a74002909d8f2d466cd454232f26e9ad03b5d608d06d4b87e4aa052e33a85828d2939752eff60da3956693103dc685737325da89850202cf2f255b7af496aeea9170ce57e18e267729d4b427ca30f68d4f46db588b332c8fe618d2a0ea5ce8b0302e7587d0d49706d8db24c8d34f3f5f527e8412a5b3a125e758711ab6f25ea21fafbbd4130a745b8c8226f73a3018e85d2cad86191c31370d5b961f4937eb8085aba8101f2a8470d864b562790eadf1870f42c1d549d74745d0f1f2ad4013831222d66bc8c74b9bf33278b60c724334acec705c6e2801b246422c014862633cf2c417ca45caf6a5cf7c5c624194ffb561ccd370fe1a36bd7c291d0307722c3c632ba72e403c936aeb5ae776f443d8558f4d243ecfcec0e07ad3acbbed3f3b370122a725f2a7b02490c8b1919911ec3befceddd4d1f432f06fb70481a68790fab36463e1338645c7fbe914a8cc5e3cfa59a2f2b8d93e9ca2fc97b6d7677e2c526b420130e4d40c589d5a49181922f14c34838a9314070e113acb7637767a8e04e93e6ddf8b336d498077f6239faf2157fc1348a1dd369bb343d590ed375142d0eb8c4d1d02ee4a6b414aa8849c66cafb83ffe60b198b323beabd4cb43da00a333f93085f6366fb7fb514278741829820e785b02daeda22d2e474762bd48caa7afa56be5827fc4af2a2dc2a8c7427bb10a8023cec60359cd7ea9676e07463f2e5cf2fce4cac914fa54c4ddae9357a853008b90e66c7a816b52672abe2462cd9138ef7f280aa4e5ed037202d77fbc4e8754a03ac4ee53d0d84e782966a5b800a3cd11af623a572b984c3a1af083918bf21b85cb41eb6db60550a87b633f333a2e33b5b338f470685087650bae6fe512c2f08424ad19d2f5cf102a3897dc0714ac3dfccd6798922aba378cddcb3fefbee022ac3c7f3e18d039d6edbf2eaba4e99b2c8cb6a292f03adc588f7fd5b1d2edf9217c7e5d8512e7d308314ea92e08516fa2af987b7e0b0910b170f8620037cff5cb1c4a6ad13058ce2d8262edd799f25b8cfa259c3382336ae550b6bb05ced7508a7a8dcd8745934574e39fc74c45fa741bb50135b16e5a5753b9ff9efef215479f412f1a49683d995753e40872a49fd9753df25d62d124309e89e28b7548a608500fe5360a8ac01a412642275d95f00da3a62cef218dbe2dc0143e5d8ff5a356b09a48bf43ddb3036ade0a4b77a6554234c5f8bf55a49454cb0f2feaa76cc8831315f9a025e08e6ffdb220ca72539882e52af683d794d53ecb9b434228facac3a91bca0a86dbc131b5b7c4e823a8ef6a1678ea5fb7a2754fe868384bf49f648f255ba834368cba6aa5c3ecf65da49804ad418f7c9ad5d871b8bcd2c03b4d2d14b7eb48c9cbfefc2ccd68d47fd9a9281e89a1fa331e0804e0c5ace4acd8c9bf722cb184337fad3d77984e5f8a3029ebe6195f4c5dec6bec575a2f6bd99da8e5b2b41a25c2ce64921903388543690fa55940dfc72550a92038fa99dc6810ac369e41c030cd4b150e5277d5ecafd44ff045adbbe567a5cf39ea4813df1969c956fa8dc764e2f27b5b2cd727724593bf13f059bd8f137868d817d8387c9da31ff965ddd5bc6529d70ff6bbe5bd444d74fe0172823e04551bcd81e20089a076c0dafd331fefd4d7a86d23a6f4f1f8fa299e97d5588df461a2741d6bc0a84879afab0aefe1bad5bd6da7d5f863cb677f2ebda834e8849cb4aedd41cfa1625cdb60679888d1fea94f9094e89bf144aed75ff95b017552e16bf6b933a9ab24045f88994acac621384bfe31ebce74db9041b264dbfed3641733ba8995f71814115d2e131d5287acc160d44ef488a8d899e1ef0898624c8593ddd785438a0b9a858b38f560758b3aa855a9774dbb6d77a40212f7b398776c745f7e8fe3a32e90f26eab908ab02b897cbd4914aeddd7db1b5f644d62bf9f0d16515cd2aee6c6c67137b906b34178c7c88bb6022f7bbc30ff3242e97e93c0232f364e079e70ae71329ce37d4e0167b8389f15361eb83427e74676ce8e936fff016295d63d37e54281eead804f322e07d1d224a5defb660c2ffedef1efc0e891007a51c272d5284e72c437b1c0be3e88ba7d331edaf3f07be4a063e34cb38f55c64e24cf6073ef337da99213a276cb8fd9cd2d286eeb7e8347bd4ef2afc3a515d8dac14e2a43f6b0c02fb6418a37a707aaa3fe152f59e40e71b5f522c05ed1f447a74945f7a16b6913d70ef3b083bb164182c9f452ac5e7b642ea3578f126fce58a06a8a3cfa900a507db18524651cbaec219ce6283202a8d11c4a91a9da0c8975d899907ede39a168c44527018cd551cb8ae365e5d76c0a3f70dd02579318ae2871abeefcb9482451ab68d13b3ed49d7e3434a08f745d4e45728d392b09f6df6e07c90f7e32874d91b0ad615c45f842f18ccdc2ad64ba2ae641029dda0cb141803aba4c8e177803bf3ff844cfb57d4dcae78a488e68927c9be7c2493452fc32ddd64ab500db8d90e2a58b51266ca3642d6ebb48765575d83da74839f8faf4cfe17c314a842f93c70cf76849d2917e7ad3368297469e1f5e3ffeed5e8662cc43bc49813fe4d0cc30e9d21d8dbb925d8b33d83c31e1e8f61a3063d059f535d69c72383c0dadfdd062cafcb7fe124533a80a56e25658b1c6305c12d29d83f7c933ee96ab22ed30561405ff2f57e43186cdfa4a179e2917b6c39347ccdd894e02692fa30036ffe171e18568764d77e2ddb0f3c1f8e99a5a30fc2664a31c69a2ab58ececb42843be055fbcf11317f95683638cb71c77dd460da2acf60e0010eb530ea44e6f6ca9642b3b629f47c5ef42c489cd364cd9b83a486735f22966e89fe8ac8418ef28b92cd9c5098f65004aac1b24c1e30c697d350374e7696409f4865bb4c6b334e8805ba807c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, {0x86f4, 0x1, [@m_pedit={0x4968, 0x10, 0x0, 0x0, {{0xa}, {0x48e4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xf1, 0x40, 0x8, 0x3, 0x1}, 0x2, 0x81, [{0x2, 0x3, 0x7, 0x3f, 0x80, 0x7}, {0x4, 0xfffffffa, 0x5, 0x20, 0x8, 0xffffffe1}, {0x20, 0x8000, 0x0, 0xe3, 0x8, 0x4}]}, [{0x0, 0x2, 0x1, 0x1f, 0x40, 0x800000}, {0x40, 0x9, 0x3, 0x100400, 0x4}, {0x0, 0x3f, 0x6, 0x8, 0x7, 0x4}, {0xfffffff7, 0x9f, 0x2, 0x7, 0x6, 0x11}, {0x100, 0x6, 0xfffff000, 0x0, 0x1, 0x1}, {0x6, 0x9, 0x4, 0x3bab, 0x9, 0x4c}, {0x8, 0x80, 0x2, 0x1ff, 0x800, 0x20}, {0x3, 0x9, 0x0, 0x0, 0x4, 0x30}, {0x2, 0x100, 0x3, 0x1, 0x800, 0x4}, {0x1, 0x9, 0x6, 0xa21d, 0x41e6, 0x1}, {0xff, 0xf8ff, 0x9, 0x7, 0x4, 0x101}, {0x9be, 0x4, 0x1a2, 0x10001, 0x5}, {0x0, 0xce, 0x5, 0xb3e, 0x8000, 0x7f}, {0x0, 0x7, 0x8, 0x3, 0x6, 0x100}, {0x4, 0x8, 0x20, 0x10001, 0x1, 0x1}, {0xf5, 0x400, 0x401, 0xff, 0x0, 0x401}, {0x8, 0x7ff, 0x81, 0x4, 0x7fffffff, 0x6}, {0x68eb, 0x75, 0x326, 0x4, 0x1f, 0x82b}, {0x7, 0x400, 0x1, 0xc0c6, 0x101, 0x9}, {0x8, 0x4, 0x1bb, 0x1000, 0x2, 0x5}, {0x1, 0x100, 0xfff, 0xf3, 0x400, 0x6}, {0x80000000, 0x9856, 0x1, 0xd865, 0x81, 0x6}, {0x7, 0x80000001, 0x7f, 0x101, 0x20, 0xfff}, {0x8, 0x0, 0x8, 0x101, 0x9, 0x9}, {0x1, 0x1, 0x6, 0x800, 0x3f}, {0x400, 0x10001, 0xad6a, 0x100, 0x9, 0x400}, {0x98, 0x0, 0x1000, 0x6, 0x2, 0x978}, {0x2, 0x4, 0x3, 0x8, 0x7, 0x400}, {0xf774d02, 0x5, 0x93c, 0x0, 0x9, 0x400000}, {0xacb2, 0x2, 0xb618, 0x20, 0x2, 0x9}, {0x8, 0x1000, 0x3a2aa9f6, 0x1, 0x8, 0x9}, {0x3ff, 0x300, 0x583, 0xffffffff, 0x34f, 0x7fffffff}, {0x1000, 0xab, 0x2, 0x100, 0x9, 0xfe}, {0x1, 0x4, 0x5, 0x6, 0x7, 0x4665}, {0xa4ba, 0xffffffab, 0x80000000, 0x5, 0x8, 0x9b}, {0x2, 0x7, 0x22e00000, 0xc4e, 0x79, 0x1c00000}, {0x4, 0x3ab, 0x7f, 0x81, 0x37, 0x4}, {0x1, 0x3, 0x9, 0x7, 0x1, 0x8001}, {0x8001, 0x8001, 0x3, 0x9f, 0x0, 0x10001}, {0x2, 0x10001, 0x1, 0x5, 0x9fb}, {0x2, 0x2, 0x5, 0x9, 0x9, 0x2}, {0x1f, 0x3, 0x4, 0xaeb, 0x5c7829b4, 0x3}, {0xffff0000, 0x5, 0xfffffffd, 0x10000, 0x8001, 0x7ff}, {0x7, 0xf04, 0x3, 0x5, 0x8, 0x3}, {0x6, 0x8, 0x6, 0x0, 0x2abf1f85, 0x8}, {0x4, 0x1000, 0x8, 0x1, 0x1, 0x9}, {0x734228d9, 0x5, 0xde, 0x32e0, 0x1000, 0x3}, {0x7fffffff, 0xffff, 0xffff2f8c, 0x3, 0x4ae1, 0x1}, {0x80000000, 0xff, 0x7, 0x2, 0x9, 0x8}, {0x1, 0x1, 0x2, 0x800, 0x9, 0x4}, {0x4, 0x7f, 0x5, 0xfff, 0x0, 0x6}, {0x58, 0x80000001, 0x1, 0x7, 0x59a2d50a, 0x9}, {0x8, 0xef8c, 0x2, 0x0, 0x8, 0x3}, {0x1ff, 0x80000001, 0xc16d, 0x1, 0x10001, 0x8001}, {0x6, 0x4, 0xfff, 0x1ff, 0x1131, 0x9}, {0x1, 0x4, 0x100, 0xb6da, 0x3, 0x10001}, {0xfffffffb, 0xfff, 0x0, 0x6, 0x3, 0x3}, {0xffffffc1, 0x7, 0x7, 0x0, 0xffffffff, 0x6b}, {0x6, 0xfffffffc, 0x1, 0x6, 0x8e, 0x4c9}, {0xffffffff, 0x10001, 0x1, 0x0, 0x81, 0x4}, {0x9, 0x1, 0x0, 0x638, 0x1, 0x3ff}, {0x6, 0x9, 0xa0b9, 0x5, 0x7, 0x9e8e8000}, {0x0, 0x2, 0x7, 0x8, 0x10000, 0x4}, {0x2, 0x0, 0x4, 0x6}, {0x1, 0x1000, 0x7, 0x7, 0x100, 0x6}, {0x3, 0x81, 0x1, 0x100, 0x401, 0x1}, {0x7, 0x8001, 0x7, 0xffff8000, 0x3, 0xd51}, {0x5, 0x9, 0x9, 0x20, 0x8, 0x358}, {0x9, 0x7, 0xd4e8, 0x9, 0x401, 0x4}, {0x7, 0x6, 0x9, 0xab, 0x1, 0x8}, {0x732, 0x0, 0x3, 0x0, 0x5, 0x9}, {0x0, 0x5, 0x4, 0x7, 0x6, 0xb2}, {0x6, 0x5, 0x933, 0xffffffc4, 0x8, 0x9}, {0xffffffff, 0x9, 0x1, 0x58, 0x80000000, 0x200}, {0x8, 0x8cc, 0x7, 0x0, 0xc, 0x2}, {0x5, 0x0, 0x80, 0x101, 0x3, 0x7}, {0x7, 0x555e, 0x101, 0x0, 0x390b, 0x3}, {0x7fffffff, 0x8, 0x7ff, 0xfff, 0x8000, 0x3f}, {0x1f, 0xfffffff8, 0x8, 0x8, 0x5, 0x4}, {0x5, 0x7, 0x4, 0x7e, 0x800, 0x2b1d}, {0xfff, 0x400, 0x5, 0x10, 0x3f, 0xfffffff9}, {0xf3, 0xffffffc0, 0xff, 0x9, 0xfff, 0xffffff00}, {0x4, 0xe7e7, 0x2, 0x0, 0x7, 0x8}, {0x1, 0x101, 0x401, 0xfffffffe, 0x5, 0x9}, {0x8, 0x8, 0x5, 0x5, 0x6, 0xd2}, {0xb2fb, 0x80000001, 0x5, 0x80000001, 0x20, 0x400}, {0xfffffffb, 0x4, 0x7, 0x2, 0x4, 0x1c0}, {0x1, 0x4, 0x3, 0x10001, 0x6, 0x3}, {0x4, 0x1, 0x8, 0x7fffffff, 0x9, 0x7f}, {0x7, 0xa44b, 0x20000000, 0x3ff, 0x100}, {0x41b, 0x64a, 0x10001, 0x81, 0x7cfdaa0b, 0x5}, {0x101, 0x8, 0xfffffffe, 0x40800, 0x4, 0x7fffffff}, {0x100, 0x8, 0xe038, 0xffff, 0x7, 0x5}, {0x100, 0x800, 0x3c, 0x939e, 0x8000, 0x4}, {0x8, 0x2, 0x8ed5, 0x9, 0x1ff}, {0x1, 0x5, 0x101, 0x97c, 0xffffff5f, 0xb08}, {0x3ff, 0x6, 0x0, 0x1ff, 0x4, 0x1}, {0xb9a, 0x9, 0x6, 0xff, 0xfffffffd, 0x98}, {0x3, 0xc3a, 0xc64, 0x7, 0x5, 0x5}, {0x40, 0x3f, 0x9, 0xff, 0x7fff, 0xfff}, {0x4, 0x1, 0x8, 0x0, 0x3f, 0x5}, {0x9da4ffd, 0x4, 0x7, 0x81, 0x40, 0x1a}, {0x6, 0xe5, 0x7fff, 0x1, 0x3f, 0x7}, {0x1ff00, 0x101, 0x1, 0x401, 0xef2c3450, 0x6}, {0x100, 0x0, 0x947, 0x2, 0x2, 0x8}, {0x0, 0x16, 0x8954, 0x7fffffff, 0x81, 0x48d7f769}, {0x29c, 0xffff, 0xf0c, 0x3ff, 0x4, 0x21}, {0x1000, 0x7, 0x0, 0x3, 0xd6, 0x7b8}, {0x100, 0x2, 0x1, 0x0, 0x4, 0x4be}, {0x0, 0x5, 0x4596, 0x101, 0x0, 0x9}, {0x3, 0x2, 0x0, 0x3, 0x7, 0x5}, {0x80000000, 0x7fff, 0x9, 0xf09, 0x0, 0xffff}, {0x1d, 0x1a, 0x0, 0x0, 0x2, 0x607}, {0x1f, 0x9, 0x81, 0x5, 0x1, 0x1}, {0x10001, 0x38a0, 0x69d6, 0x40, 0x5, 0x9}, {0x7fffffff, 0x9, 0xabf, 0x0, 0x0, 0x80000000}, {0x0, 0x5, 0x4, 0x1ff, 0x9}, {0xd22, 0x7f, 0x9, 0x4, 0x4, 0x9}, {0x0, 0x1, 0x9, 0x3, 0xec, 0xc}, {0x2, 0x8, 0x9, 0x4, 0x3, 0x8}, {0x9, 0x9, 0xbdb, 0xffff, 0x1, 0x3}, {0x5, 0x4, 0xfffffffe, 0x9ea6, 0x0, 0xffff}, {0x8939680, 0xffffffe0, 0x200, 0xfff, 0x6, 0x7}, {0x4, 0xeea, 0x3ff, 0x3, 0x295b, 0x81}, {0x150, 0x9, 0xffff, 0x8, 0x8, 0x8}, {0x1, 0x5, 0x5, 0x0, 0x6, 0x3}, {0x8, 0x401, 0x9, 0x7, 0x80, 0x6}, {0x6aa1, 0xffffffff, 0x0, 0xc2, 0x1, 0x48}], [{0x1, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x1}, {0x5}, {}, {0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x2}, {0x2}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x0, 0x9, 0x5, 0x3f, 0x1}, 0x8, 0x6, [{0x4, 0x51, 0x6, 0x2, 0xd93, 0x3}, {0x5, 0x8, 0x1, 0x6, 0x8, 0x8}]}, [{0x101, 0x7f, 0x0, 0x5, 0x7, 0x2}, {0x2, 0x7, 0x101, 0x9, 0x100, 0x4}, {0x10001, 0x1, 0x7f, 0xff, 0x8276, 0x9}, {0x1, 0x7, 0xec, 0x8001, 0x7, 0x2}, {0x800, 0xfffffff8, 0x101, 0x9, 0x5}, {0x1, 0x80, 0x2, 0x7, 0xe5, 0x1f}, {0x0, 0xa0, 0x1, 0x0, 0x9, 0x2}, {0x37, 0x0, 0x6, 0x1, 0x6, 0x4}, {0x1, 0xff, 0x8, 0x3, 0x2}, {0x7, 0x7fff, 0x600, 0x400, 0xad, 0x7}, {0x9, 0x401, 0x4, 0x8, 0x5d, 0x203}, {0x45, 0x10001, 0x48000000, 0x8, 0x5, 0xe8}, {0x5, 0x8, 0x3ff, 0x8, 0x10000, 0x81}, {0x10001, 0x200, 0x3, 0xf8, 0x1, 0x2}, {0x6, 0x3, 0x401, 0x3, 0x5, 0x400}, {0x0, 0x7, 0x8001, 0x52ab, 0x8, 0x2}, {0x7, 0x1ff, 0x0, 0x8, 0x3, 0x4}, {0x7, 0x4, 0x5, 0x9, 0x6, 0x800}, {0x5, 0xbc7, 0x1, 0x5, 0x7fffffff, 0x8001}, {0x6, 0xfffffff9, 0x5e83, 0x0, 0xffffffff, 0x3f}, {0x0, 0x4, 0x2, 0x4, 0x5f, 0x6e0}, {0x8001, 0x81, 0x9, 0xfb2a, 0x80000001, 0x1}, {0x10000, 0x0, 0x9, 0xffffffff, 0x2, 0x1}, {0x750, 0x800, 0x0, 0x0, 0xa1, 0x6}, {0x8, 0x7, 0x5, 0x20, 0x7, 0x7}, {0x7, 0x8, 0x5, 0x6, 0x3, 0x5}, {0xb04, 0x0, 0x4, 0x7, 0xffffffff, 0x3}, {0x0, 0x89, 0x2, 0x0, 0x1, 0x43}, {0x4, 0x782d, 0x5, 0x0, 0x401, 0x6}, {0x20, 0xfff, 0x5ab, 0x200, 0x3f, 0x4}, {0x2, 0x9, 0x9, 0x200, 0x1, 0x9}, {0x69, 0x9967, 0x7, 0x15fa, 0x2, 0x10000}, {0x1000, 0x2, 0x9, 0x7, 0x0, 0x101}, {0x4, 0x9c6, 0xffffffe1, 0x1a1, 0x657, 0xba3}, {0xffffffff, 0xb51b, 0x80, 0x6, 0xb69}, {0x8, 0x4, 0x800, 0x0, 0x40, 0x1f}, {0x2, 0x0, 0x4, 0x1, 0x8, 0x3f}, {0x5, 0x2, 0x0, 0x1, 0x401, 0x7}, {0x8000, 0x3, 0xa27, 0x1, 0x4, 0x3ff}, {0x2, 0x4, 0x1, 0x8, 0x10001}, {0x0, 0x1, 0x7, 0xffffffff, 0x8001, 0xfffffff7}, {0xe618, 0x80000000, 0x2, 0x101, 0x392, 0xf4}, {0xff, 0x3413, 0x6, 0x5, 0xfffffffe, 0x9}, {0x0, 0xfff, 0x4, 0x5, 0x80, 0x7fffffff}, {0x9, 0xe35d, 0x119, 0x80000001, 0x3, 0x7}, {0x4, 0x294d9ddc, 0xffffff56, 0xffff, 0x0, 0x7ff}, {0x64, 0x5, 0x7ff, 0x4, 0xdf, 0x100}, {0x5, 0xbd7, 0x1000, 0x785, 0x7, 0x8000}, {0x100, 0x3, 0xffffffff, 0x9, 0x5, 0xffffffff}, {0x8, 0x6, 0x0, 0x0, 0x5, 0x8}, {0x3f, 0x2, 0x2, 0x3300, 0x80, 0x8}, {0xff, 0x80, 0x5, 0x1, 0x7f}, {0x3, 0x3ff, 0xfffff801, 0x9fe, 0x0, 0x3}, {0x4, 0x67, 0x1, 0x9dc6, 0x0, 0xe7f5}, {0x3, 0x1000, 0x400, 0x3, 0xffff0000, 0x561}, {0xfffffff9, 0x8, 0x6, 0x0, 0x80000001, 0x9}, {0x10001, 0x4, 0xffffff80, 0xfffffeff, 0x100, 0x1}, {0x1, 0x7, 0x800, 0x1, 0xffff0001, 0x25}, {0x1, 0x6, 0x2, 0xfffffe00, 0x7, 0x800}, {0x1000, 0x800, 0x1, 0x3, 0x32, 0x26}, {0x0, 0x400, 0x4, 0x63f, 0x800, 0x1f}, {0x37a, 0x5, 0xffffffff, 0x20, 0x1, 0x2}, {0x10000, 0x20, 0x0, 0x401, 0xfffffffd, 0xffff}, {0x4, 0x3, 0x3d2, 0x0, 0x42e8, 0x4}, {0x86c, 0xffffffff, 0x1, 0x99be, 0x275, 0x1}, {0x8, 0x80000001, 0x2, 0x10001, 0x9, 0x7c8}, {0x7, 0x8, 0x8d3, 0x100, 0x101, 0x9}, {0x6, 0x2, 0x8, 0x7ff, 0x9, 0x1f}, {0x4473, 0x40, 0x7, 0x0, 0xbb, 0x4bb}, {0x1ff, 0x3ff, 0x3ff, 0x1000, 0x8, 0x40}, {0x8000, 0x9, 0x5, 0x101, 0x7, 0xfffffff7}, {0x5, 0x7, 0x5, 0xffffffff, 0x3c3d1911, 0x7}, {0x9, 0x9, 0x81, 0x69dc, 0x5, 0xe3a}, {0x8000, 0x2, 0x8, 0x460, 0x6, 0x3}, {0xd6, 0x8, 0x7, 0x7, 0x3, 0x80000000}, {0x2a2, 0xd6, 0x7fffffff, 0x3, 0x2, 0x80}, {0x4, 0x7fff, 0x7, 0x8d, 0x7, 0xffffff7f}, {0x14000000, 0x8001, 0x2c, 0x7fff, 0x7, 0x4}, {0x58, 0x200, 0x2, 0x7, 0x8, 0x3}, {0x0, 0x1f, 0x6, 0x7fff, 0x1, 0x7}, {0x2, 0x0, 0x7, 0x0, 0x3, 0xffffffe0}, {0x413, 0x9, 0x5, 0x1, 0x3f, 0x1000}, {0x39, 0x89b, 0x0, 0x5, 0x5}, {0x5, 0x6, 0x9255, 0xd2ab, 0x6, 0xfffffe01}, {0xa394, 0x8, 0x5ddd, 0x8, 0x400, 0x6}, {0xfffffe00, 0x5, 0xffffffff, 0xffff, 0x1, 0x400}, {0x8, 0x8, 0x10000, 0xce5, 0x8, 0x6}, {0x93e4, 0x400, 0x6, 0x2, 0x8, 0x2}, {0x800, 0x5, 0x7fff, 0x80000001, 0xffffff80, 0x127}, {0x1, 0x7, 0x9, 0x6, 0x6, 0x7}, {0x7fff, 0x5, 0x7, 0x401, 0x1}, {0x0, 0x1000, 0xce73, 0x10001, 0x1b512bed, 0x8}, {0x0, 0x7fff, 0x290, 0x9, 0xfffffffa, 0x1b99}, {0x83c1a023, 0x76, 0x4, 0x1000, 0x3e1f, 0x3f800000}, {0x1, 0x5, 0x20, 0x3, 0x7}, {0x3f, 0x3, 0x200, 0xfffffffd, 0x1, 0xffffff7a}, {0x6900, 0x200, 0x1000, 0x4, 0x9, 0x4}, {0x101, 0x3, 0x3, 0x2, 0xae, 0x2}, {0x3f, 0x7, 0x1, 0x401, 0x0, 0x9}, {0x81, 0x1ff, 0xffffffff, 0x9, 0x7, 0x5}, {0xffffff7f, 0x9, 0x7fff, 0x8, 0x7fffffff, 0x7}, {0x1, 0x80000000, 0x5, 0x2, 0x7f, 0x3}, {0x0, 0x101, 0x4, 0xf39e, 0x0, 0x80}, {0x5, 0xfffffffd, 0x100, 0x5707, 0x8, 0x4}, {0x7ff, 0x12, 0x7, 0x8, 0x0, 0xffff}, {0x1ad280, 0xfffeffff, 0x3, 0xfffffff7, 0x3, 0x40}, {0x3, 0x81, 0x2, 0x5, 0x1, 0x7}, {0x96, 0xfffeffff, 0x5, 0x7, 0x0, 0x8}, {0x1, 0x1, 0x80, 0x1ff, 0x188f8f56, 0x8000}, {0x5, 0x1, 0x8, 0x2, 0x9, 0x80}, {0xce23, 0x80000, 0x3, 0x0, 0xfff, 0xcc0}, {0x2, 0x2, 0x1ff, 0xa30, 0x6, 0xb0}, {0x9, 0x5, 0x8, 0x5, 0x1, 0x10000}, {0x200, 0x0, 0xe378, 0xc0, 0x400, 0x6}, {0x5, 0x4, 0x82f, 0x2, 0x8}, {0xfffffff9, 0x7, 0x95, 0x2000000, 0x101, 0xffff4505}, {0x80000001, 0xfff, 0x7ff, 0x20, 0x10001, 0x2}, {0x39088dc2, 0x8, 0x200, 0xd0, 0x8, 0x9}, {0x1, 0x5c, 0x80000001, 0x0, 0x1000, 0xe51}, {0x9, 0x0, 0x9, 0x40, 0xe1, 0x93}, {0xfffffffd, 0x800, 0x6333029d, 0x2, 0x9}, {0x1d3, 0x5, 0x9, 0x800, 0x3ff, 0x7}, {0x9, 0x200, 0x3, 0x4, 0x7, 0x200}, {0xad3, 0x9, 0x6, 0x6, 0xb0b, 0x3}, {0x6, 0x400, 0x800, 0xffffffff, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8000, 0x4, 0x1ff}, {0x3, 0x5, 0x3, 0xffff, 0x0, 0x73}, {0x744, 0x88, 0x7, 0x6, 0x0, 0x7}], [{0x2}, {0x5, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x9a5985b42448a29c}, {0x3, 0x1}, {0x2}, {}, {0x3, 0xdc8860872105e0e1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {}, {0x4, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x1, 0x69ae92a929a09bfc}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {}, {}, {0x3}, {}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x2, 0x55e, 0x4, 0x8, 0x1000}, 0xfb, 0x7, [{0x401, 0x8, 0x0, 0x400, 0xffffffff, 0x81}, {0x0, 0xff, 0x4, 0xfffffff8, 0x3, 0x7}, {0x8000, 0x3, 0x2, 0x1, 0xb7, 0x86a0}, {0x9, 0x1, 0xb48, 0x101, 0x7f, 0x3}, {0x7, 0x7eb6be0c, 0x4, 0x0, 0x3358, 0x6}, {0x9, 0xffffffff, 0x5, 0x3, 0x6, 0x1f}, {0x3ff, 0x9, 0x1, 0x400, 0x8000, 0x8001}]}, [{0x1, 0x2, 0xfffffffe, 0x9, 0x3, 0x4}, {0x3, 0x1, 0x2d, 0x3, 0x0, 0x17}, {0x100, 0x8, 0x3, 0x2, 0x7, 0x3}, {0x0, 0x1, 0x2, 0x3, 0x7fff, 0xffff}, {0x4, 0x4, 0x0, 0x5, 0x4}, {0x7, 0x5000000, 0x4, 0x8, 0x3, 0x1}, {0x8, 0x3ff, 0x0, 0x0, 0x5}, {0x7f, 0xa982, 0x8, 0x9, 0x7, 0x5}, {0xc2e, 0x7, 0x3ff, 0xc30b, 0x7, 0x81}, {0x7, 0x9, 0xfffffc00, 0x0, 0xba, 0x8}, {0x9, 0x401, 0x81, 0x1, 0x9, 0x8}, {0x2, 0x0, 0x8000, 0xff, 0x8, 0x3}, {0x8, 0x2, 0x401, 0x4, 0x200, 0x435}, {0x9, 0x1, 0x7, 0x6, 0x200, 0x1f}, {0x2, 0x1, 0x4, 0x80, 0x7a, 0x6}, {0x2, 0x7, 0x400, 0x3, 0x81, 0x2}, {0x69, 0x0, 0x5, 0xffff2501, 0x3, 0x5}, {0x3, 0x8, 0xff, 0x1, 0x2, 0x10001}, {0x7, 0x7, 0x5d4, 0xffffffff, 0x1000, 0x2}, {0x0, 0x9, 0x5, 0xad68, 0xffffffff, 0xfffffffb}, {0x40, 0x4, 0xc09, 0x40, 0xffffff81, 0x1}, {0x800, 0x0, 0x6, 0x40, 0x101}, {0x200, 0x5, 0x2, 0xff, 0xb49a, 0x4}, {0x3, 0x4, 0x4, 0x6, 0x800, 0x401}, {0x7, 0xb6, 0x3ff, 0x1, 0x1000, 0x10001}, {0x0, 0x9, 0x7, 0x8001, 0x1, 0xffff0001}, {0x33, 0xa1, 0xee0, 0x7f, 0x2d, 0x2}, {0x0, 0xffffff7f, 0x7fffffff, 0x200, 0xff, 0x40}, {0x7, 0x1000, 0x6, 0x0, 0x94, 0x200}, {0x1000, 0x40, 0x52, 0x5, 0x7ff, 0x3}, {0x44, 0x1, 0x200, 0x81, 0x0, 0x100}, {0x81, 0x6, 0x0, 0x8, 0x3f, 0x80000001}, {0xeba, 0x8001, 0x6, 0x3, 0x97c2, 0xfffffe62}, {0x0, 0x3ff, 0x3f, 0x2, 0x6, 0x6}, {0xffff, 0xfffffffe, 0x9, 0xffff0001, 0x2357, 0x1f}, {0xd72, 0x5, 0x5, 0xfffffff7, 0x3, 0x8}, {0x5, 0xfe, 0x4, 0xd2e, 0xf13b}, {0x80000001, 0x400, 0xfffffff7, 0x0, 0x5, 0x3}, {0x2, 0x2, 0xfffffffb, 0x5, 0x8, 0x5}, {0x1, 0x3f, 0x2, 0x101, 0x10000, 0x8615}, {0x0, 0xdf79, 0x1f, 0x906, 0x4, 0x3}, {0x8000, 0x400, 0x0, 0x0, 0x6, 0x8}, {0xe2d, 0xffff2ffe, 0x800, 0x629c, 0x5e00, 0x7fff}, {0xfffffffe, 0x586a, 0xfffffffb, 0x4c, 0x401, 0x7}, {0x1, 0x8, 0x4, 0x40, 0x800, 0x1}, {0x2c08, 0x7, 0x4, 0x6, 0x9, 0x3}, {0x80000001, 0x400, 0x1ff, 0x9, 0xff, 0x1}, {0x1, 0x7, 0x698, 0x3, 0x5, 0x1ff}, {0x3ff, 0x4, 0x2, 0x9, 0x4, 0x3000000}, {0x0, 0x40, 0x3ff, 0x6, 0x5, 0x7}, {0x1000, 0x2, 0x10000, 0x10000, 0x5, 0x9}, {0x5, 0x85, 0x5, 0x2, 0x7, 0xfff}, {0x5, 0x894, 0x100, 0x9, 0x1, 0xfffffffc}, {0x1, 0x77, 0x5, 0xfa5, 0x4a7a, 0x7}, {0x5b33689c, 0x1, 0x5, 0x6ac2, 0x2, 0x2}, {0x1f, 0x41d, 0x4, 0x0, 0x3, 0x7fff}, {0x5, 0x1, 0x4, 0xd52a, 0x400, 0x6}, {0x1, 0x3a04ff58, 0x1, 0x5e51, 0x6, 0x5}, {0x7f75, 0xffffffff, 0x7, 0x6, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x16a3, 0x8, 0x1ff}, {0x7, 0x7, 0x200, 0x4fc, 0x0, 0xd106}, {0xc96a, 0x6, 0xc2f, 0x1, 0x1, 0x3ff}, {0x1, 0x8, 0x7f, 0x7, 0x0, 0x8}, {0x3, 0x6, 0x7b, 0x7ac3, 0x2, 0x9}, {0x7, 0x5, 0x100, 0x0, 0x9, 0xfffffeff}, {0x4, 0x6, 0x6, 0x5, 0x7, 0x3}, {0x7, 0x5, 0x8, 0x6d26, 0x4, 0x400}, {0xffffff26, 0x7ff, 0x3, 0x80000000, 0x200, 0xc07}, {0x4, 0x0, 0x3ff, 0x9, 0xb38, 0x7}, {0x6, 0x6, 0x1, 0x1, 0x40, 0x8}, {0x6, 0x8488, 0xfff, 0x4, 0x9, 0x3ff}, {0x7, 0xffffef92, 0x597, 0x80000000, 0x200, 0xd11}, {0x1, 0x0, 0x5, 0x916, 0x9, 0x4c}, {0x2, 0x8e40, 0x100, 0x7, 0x6, 0x3ff}, {0x80000000, 0x7, 0x6, 0x5, 0x7fffffff, 0x20}, {0x101, 0x1, 0x4, 0x8, 0x7, 0x6}, {0x9e2, 0x1f, 0x3ff, 0xff, 0x0, 0x1}, {0x9, 0x80, 0xd325, 0x2, 0xfffffffe, 0x6000000}, {0x3, 0x8ddd, 0x8b, 0x1, 0x1ff, 0xf21}, {0x10000, 0x7, 0x1000, 0x7, 0x0, 0x2}, {0xeca1, 0xfffffffb, 0x7, 0x5, 0x8, 0xffff0000}, {0x2, 0x0, 0x87, 0xffffffe0, 0x401, 0x1b86}, {0xf036, 0x3, 0x400, 0x80000000, 0x9, 0x3}, {0x9, 0x4, 0x1, 0x5, 0x0, 0x2}, {0x3, 0xfffffff8, 0x7, 0xffffffff, 0x9, 0x7e}, {0x5, 0x9, 0x9, 0x2, 0xcf, 0x517b}, {0x3, 0x9, 0x4, 0x3, 0x0, 0x2}, {0x1ff, 0xfffffffb, 0xd8, 0x1, 0x9, 0x6}, {0x80000001, 0x2, 0x2, 0x8001, 0x6, 0x9}, {0xc74, 0x3, 0x65, 0x8000, 0x1, 0x200}, {0xfffffff7, 0x8, 0x7fffffff, 0x3, 0x8001, 0x8}, {0xe2e, 0x11d, 0x80000000, 0x101, 0x4, 0x9}, {0x200, 0x2, 0xb0a8, 0x9, 0x7, 0x6b5}, {0x4, 0xe2, 0x6, 0x7, 0x1, 0x9}, {0x6, 0x4, 0x8000, 0x80, 0x80000001, 0x49f}, {0x100, 0x200, 0x3, 0x5, 0x1, 0x1f}, {0x4ed0, 0x135, 0x401, 0x7f, 0x8, 0x4}, {0x40, 0x4, 0x6, 0x1}, {0x5, 0x90a, 0x2, 0x4, 0xd71, 0x1f}, {0x81, 0x0, 0x1ff, 0xffff0001, 0x4}, {0x617, 0x91, 0x6, 0x200, 0x2, 0x6d5c}, {0xfffffffd, 0x9, 0x3, 0x8, 0x80000000, 0x1}, {0xe5, 0x9, 0x3, 0x9, 0xffffebf3}, {0x3f, 0x10000, 0x2, 0x2, 0x9, 0x200}, {0xd12, 0x4, 0xffff, 0x0, 0xffff, 0x6}, {0x7, 0x0, 0x0, 0x80, 0x10001}, {0x1000, 0x9, 0x86, 0x1000, 0x87, 0x3}, {0x1, 0x1800000, 0x78, 0x1, 0x0, 0xcd1}, {0x2, 0x3f, 0x6, 0x3, 0x4, 0x1}, {0x9, 0xd692, 0x8, 0x10001, 0xbe3, 0x3}, {0x1, 0x400, 0x7, 0x1, 0x40, 0x3}, {0x7, 0xfffffff7, 0x7ff, 0xafa, 0x7, 0x3}, {0x1f, 0xffffffff, 0x4, 0xb63, 0x9cce, 0x7}, {0x3, 0x401, 0xfff, 0x6, 0x1, 0x1}, {0x3ff, 0x4, 0x7fffffff, 0x4, 0x9, 0x8}, {0xc8, 0x5, 0x0, 0x1, 0xffffffff, 0x5}, {0xc8c8, 0x4, 0x8001, 0x80000000, 0x101, 0x3}, {0x39, 0x2, 0xd04, 0x4, 0x3, 0x8a}, {0x7, 0x0, 0x3, 0x80000001, 0x4, 0x738e}, {0x7, 0x80000001, 0x400, 0x0, 0x6}, {0x80, 0x5, 0x1f, 0x2, 0x3ff, 0x4}, {0x8, 0x8, 0xaea5, 0x2b35, 0x6, 0x8001}, {0x7fffffff, 0x400, 0x21, 0x1, 0x0, 0x118}, {0x2, 0x0, 0x80000000, 0x9, 0x4}, {0x95a1, 0x1, 0x8, 0x2, 0x0, 0x6}, {0x6676, 0x3f, 0xffffffd7, 0xfffffff9, 0x3, 0x3c000000}, {0x2, 0x7fffffff, 0x6, 0xc5, 0x8f4, 0xfffffff8}, {0x0, 0x2, 0xc1bbd02, 0x0, 0x400, 0x400}], [{0x4}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0xb1721ce668926f33, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x9e16f57c46162b9e}, {}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x4}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x401, 0xd, 0x1, 0x10001, 0xca7}, 0x80, 0x4, [{0x5, 0x81, 0x2, 0x6, 0x7fff, 0x4}, {0xfff, 0x7, 0x0, 0x9, 0x7ff, 0x5}]}, [{0x7, 0x101, 0x5, 0x7fff, 0x4, 0x200}, {0x1, 0x1, 0xd69, 0x1, 0x8000, 0x2}, {0x936c, 0x8001, 0x3, 0xffff, 0x7, 0x3}, {0x1, 0x8, 0x4, 0x6, 0x4, 0x4}, {0x3ff, 0x0, 0x2, 0x7, 0xffff, 0x4}, {0x88d, 0x6, 0x81, 0xffff, 0x4, 0xd6}, {0xfffff800, 0x9, 0xf0, 0xffff, 0x30, 0x7}, {0x8, 0x3, 0xffff, 0x662b, 0xcbf4, 0x3}, {0xffffffff, 0x3, 0x4, 0x1, 0x0, 0x5}, {0x3, 0x2, 0x3ff, 0x9, 0xfaa, 0x2}, {0x85a1, 0x43, 0x4, 0x7, 0x964, 0x7}, {0x1000000, 0x0, 0x51241ca7, 0x4, 0x0, 0xcc3}, {0x5, 0x7, 0x101, 0x3, 0x1, 0x4}, {0xa2, 0x6, 0x800, 0x9, 0x8000, 0x2}, {0x101, 0x1, 0x9, 0x6, 0x1, 0x7f}, {0x200, 0xffff8000, 0x4, 0x27eaec2c, 0xd79f, 0x3f}, {0x7ff, 0x1, 0x3, 0x401, 0x4, 0x2715}, {0x0, 0x5, 0xff, 0x81, 0x7fff, 0x800}, {0x1, 0x21a, 0x0, 0x9, 0x2, 0x7}, {0x4, 0xff, 0x1f, 0x3, 0x7, 0x81}, {0x2, 0x7, 0xa8a5, 0x0, 0x8001, 0x200}, {0xffff, 0x0, 0x904, 0x5, 0x7, 0x8}, {0x5, 0xbf4, 0x10001, 0x4, 0xfe2d, 0x7}, {0xffffffff, 0x5, 0x3bc67d02, 0x5, 0xffff, 0x5}, {0x100, 0xffffffff, 0x5, 0xfffffffa, 0x7f, 0x80000001}, {0x400, 0xcf, 0x2, 0x20, 0x3, 0x3}, {0x1000, 0x7, 0x5, 0x6, 0x400, 0xffff7fff}, {0x2, 0x1000, 0xfffffff7, 0x100, 0x4, 0x100}, {0xe4, 0x0, 0x7ba, 0x8a, 0xd63, 0x4}, {0x3, 0x5, 0x4, 0x7f, 0xff, 0x3}, {0x1, 0x6, 0x9, 0x3, 0xfff, 0x8001}, {0x869, 0x3, 0x9, 0x1ff, 0xa13, 0x2}, {0x1, 0x10d3, 0x9, 0xb916, 0x3, 0x100}, {0x80000000, 0x7867, 0x3, 0x2, 0x0, 0x4}, {0x80000001, 0x2, 0x1ff, 0x3ff, 0x81, 0xa8}, {0xfffffff7, 0x7, 0x6, 0x6, 0x6, 0xffff}, {0x407f, 0x80, 0x5, 0x9, 0x7ff, 0x4}, {0x1, 0x2, 0x3, 0x9, 0x5, 0xffffff71}, {0x100, 0x7fffffff, 0xfffffffb, 0x9, 0x3, 0x9a2}, {0x4, 0x0, 0x3, 0x6, 0x80000000, 0x81}, {0x3, 0x800, 0xffff, 0xc80, 0x2, 0x90000000}, {0x1d3, 0x400, 0x6, 0x3, 0x8b, 0xeec2}, {0x3, 0xffffffe1, 0x0, 0x200, 0x1d3d, 0x90}, {0x10, 0x2, 0x0, 0xd475, 0x2, 0x7}, {0x8, 0xa53, 0x10001, 0x2, 0x22, 0x1}, {0x1d7f, 0x1, 0x5, 0x4, 0x6, 0x8001}, {0x40, 0x8001, 0x610, 0x8001, 0x0, 0x7}, {0x80000001, 0x3, 0x9, 0x2, 0xfffffff7, 0xfffffe01}, {0x7, 0x7fff, 0x8000, 0x5, 0x9, 0x8000}, {0x0, 0x40, 0x8, 0xcfd9, 0x5}, {0x3ff, 0x6, 0x3f, 0x1, 0x7e87, 0x8}, {0xf7b, 0x367, 0x300, 0x3, 0xd384, 0x2}, {0x1, 0x1e7, 0x3f000000, 0x8412, 0x4, 0x5}, {0x3, 0x7, 0x7fffffff, 0x5, 0x6, 0x20}, {0x2, 0x9, 0xe09, 0x5, 0x5}, {0x0, 0x81, 0x1, 0x9, 0x1, 0xfffffff7}, {0x800, 0x1, 0x3, 0x1000, 0x6e63, 0x7}, {0xfff, 0x3, 0x8, 0x8001, 0x5, 0x8}, {0x1, 0x5, 0x1, 0xfffffff7, 0x3, 0xe72f}, {0x8, 0xffffffff, 0x0, 0xfff, 0x8, 0x3}, {0x2, 0x4c9f, 0xbc94, 0xffff, 0x6, 0x2}, {0x7000, 0x5, 0xdfbc, 0x9, 0x4000000, 0x6}, {0x7, 0x0, 0x4, 0xffffffe1, 0x0, 0x10001}, {0x7, 0x9, 0xffff, 0x8, 0xffffffff, 0x5}, {0x4, 0x4, 0xffffff00, 0x0, 0x7ff, 0x3f}, {0x40000000, 0x3, 0x7, 0x9, 0xdee, 0x3}, {0x7, 0x1000, 0x0, 0x7ff, 0xf35f, 0x1f}, {0x6, 0x8, 0x6, 0x7d, 0x6c, 0x4}, {0x1f, 0x1, 0x5, 0x79, 0x8, 0x2}, {0x401, 0x203, 0x7b4a, 0x7, 0x1000000, 0x8b}, {0x3, 0x7, 0x0, 0x6, 0x2, 0x332}, {0xca, 0x1, 0x5, 0x3, 0x9, 0x7}, {0x1, 0x7fffffff, 0x9, 0xffff0000, 0xffff, 0x6}, {0x8001, 0xff, 0x4, 0x7, 0x7f, 0xc059}, {0x1, 0xfc, 0x2ea, 0x1, 0x2, 0x5}, {0x4, 0x0, 0x7f, 0x6, 0x5, 0x3}, {0x46, 0x4, 0x0, 0x2, 0x8, 0x6}, {0x0, 0x3f, 0x9, 0xffffff7f, 0xffff0000, 0x3}, {0x2, 0x7, 0xfffffeff, 0x0, 0x4, 0x9}, {0x9, 0x1, 0x6, 0x5, 0xfffffeff, 0xa1d}, {0x9, 0x0, 0x401, 0x1, 0x43, 0x1}, {0xfffffffb, 0xffff0000, 0x27d1, 0x0, 0x77b4c5c3, 0x2}, {0x8, 0x8, 0xfff, 0x8, 0xfffffffc, 0x4}, {0x10002000, 0x5, 0x1, 0x9, 0x5, 0x20}, {0x3e, 0x3f, 0x7fff, 0x6, 0x3, 0x9}, {0x2, 0x400, 0xe3f, 0x3, 0x1, 0x7}, {0x7, 0x78, 0x5e, 0x0, 0x1, 0x3}, {0x3, 0xffff, 0x1, 0x3, 0x7fff, 0x5}, {0x8000, 0x1f, 0x7, 0x10001, 0x1f, 0xfd5}, {0x649d, 0x7, 0x800, 0x5, 0x7fffffff, 0xfff}, {0x3, 0x1, 0x1f, 0xd60, 0x3, 0x101}, {0x5ca, 0x4, 0x6, 0x2, 0x4, 0x8000}, {0x4, 0x8, 0x7, 0x3, 0xd6e, 0xfffffffd}, {0x3f, 0x400, 0x0, 0x0, 0x6, 0x6}, {0x8, 0x3, 0x5, 0x7f, 0x101, 0x8}, {0xfffffffa, 0x3, 0x3, 0xfffffff9, 0xfff, 0x1000}, {0xfffff000, 0x20, 0xffffffc1, 0x4, 0x7, 0x7}, {0x5a, 0x6, 0x7f, 0x3, 0x4, 0x7fff}, {0x40, 0x7, 0x7, 0x5, 0x5, 0xf6}, {0x1, 0x7b1d2dec, 0x200, 0x2, 0x3, 0x3}, {0x7ff, 0x8, 0x81, 0x861b, 0x3, 0x2}, {0xff, 0xffff1c57, 0x7, 0x100, 0x6, 0x5}, {0x401, 0x7, 0x0, 0x2, 0x4, 0x2}, {0x401, 0x9, 0x34, 0x1, 0x6, 0x8001}, {0x7fff, 0x51a, 0x9, 0x3201f846, 0x9, 0x7}, {0xa50, 0x9a, 0xbd03, 0x8, 0x8, 0x8}, {0x7f, 0x4ec, 0x7, 0x72, 0x8, 0x9}, {0x6, 0xffffffff, 0x6ea, 0x1b, 0x7f, 0xe6}, {0x0, 0x3b5c, 0x9, 0x4, 0x50c, 0x1}, {0xfffffff7, 0xb3, 0xbc, 0x7, 0xe371, 0x2}, {0x81, 0x0, 0x101, 0x4, 0x6cec0301, 0x20}, {0x6, 0xf4f, 0x74d82cd, 0x513e, 0x4, 0x9}, {0x1, 0x0, 0x1ff, 0x7, 0x6, 0x2}, {0x8a2d, 0x401, 0x4, 0x5, 0x9ca7, 0x8f}, {0x7, 0x7, 0xe7d, 0x2775, 0x2, 0x546}, {0x3, 0x7, 0x5, 0x80, 0x80, 0x101}, {0x4, 0x4, 0x0, 0x1, 0xc129, 0x5}, {0xfffffff7, 0xaafa, 0xb34, 0x80, 0x2, 0x6}, {0x9, 0x2, 0x55d3, 0x0, 0x9, 0x80000001}, {0x6, 0x1, 0x6, 0xffff, 0x401, 0xf1}, {0x8, 0x80000001, 0x4, 0x1, 0x8, 0x7ff}, {0x9, 0x1, 0x2, 0x9, 0x9, 0x7fff}, {0x8, 0xea, 0xff, 0xff, 0x4, 0x85}, {0x3, 0x3, 0x3, 0x5, 0x9, 0x81}, {0x3, 0x55, 0x7, 0x5, 0x0, 0x2}, {0x200, 0x6, 0x7, 0x7, 0x200, 0xb5}, {0x247e3c91, 0x7, 0x4, 0x7ad, 0xfffffff7, 0x1f}, {0x5, 0x0, 0x0, 0x4deeab45, 0x5, 0x2}], [{0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x6}, {0x5}, {0x4}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x8bf3adace232901e}, {0x0, 0x1}, {0x1}, {0x3}, {0x5}, {}, {}, {0x3, 0x1}, {0x5}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1}, {0x3, 0x1}, {0xff2cdab3d9f5149, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x1}, {}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x1}, {0x4}, {0x1, 0x258145466f5e0424}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x5}, {0x5}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0xde5598bbf06003c6, 0x1}, {0x0, 0x1}, {}, {0x290e3e2fc6aa606f, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {}, {}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x1}, {}, {0x4}, {0x4}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x7ff, 0x3, 0xc, 0x6, 0x9}, 0x1, 0xff, [{0x0, 0x6, 0xfffffbff, 0x7fff, 0xfffffff8, 0x7ff}, {0x1, 0x247, 0x1, 0x1, 0x9, 0x6}, {0x7ff, 0x5, 0xe0000000, 0x7ff, 0x101, 0x6b}, {0x6, 0x7fff, 0x8, 0x5, 0x1ff}, {0x8b, 0xff1, 0x1, 0xfffffffb, 0x3, 0x1b9}, {0xcb, 0xffff, 0x8, 0x9, 0x10000, 0xffff}, {0x8, 0xa97f, 0x3, 0xfa42, 0x80000, 0x80000000}, {0x7, 0x9, 0x5, 0x0, 0x8001, 0x6}, {0x7fd, 0x7fff, 0x4a65, 0x2, 0xffff}, {0x8, 0x2, 0x1b3, 0x7f, 0xff, 0x7ff}]}, [{0x8, 0x10000, 0x800, 0x0, 0xffffffe1, 0x2}, {0x0, 0x5a31b065, 0x2, 0x65, 0x7, 0x1}, {0x3ff, 0x3af8, 0x5, 0x4, 0x9, 0x9}, {0x5, 0x6, 0x8, 0x400, 0x3, 0x6}, {0x0, 0x2, 0x7f, 0xff, 0x10000, 0xffffffff}, {0x8000, 0x7fff, 0x1, 0x0, 0x0, 0x21}, {0x6, 0x616, 0xff, 0x7, 0xfffffffd, 0x3}, {0x5, 0x8001, 0x4, 0x943140f, 0x8, 0x7}, {0x1, 0xff, 0x7f, 0x370a, 0x8}, {0x9, 0x1f, 0x2, 0x10000, 0x7, 0x1}, {0xd0, 0x401, 0x40, 0x4, 0x8a, 0x7bf5}, {0x4, 0xfffff801, 0x9, 0x9, 0x8, 0x3}, {0x7f, 0x1, 0x5, 0x0, 0xfffffffd, 0x6}, {0x6, 0x8, 0x6, 0xe0000000, 0x2, 0x2633}, {0x7, 0x3, 0x6, 0xef0, 0x5, 0x80000001}, {0x1, 0x4, 0x4, 0x1, 0x3, 0x57a}, {0x0, 0x1, 0x6, 0xc0, 0x1000, 0x7}, {0x4000000, 0xfffffff9, 0x4, 0x6, 0x0, 0x80000000}, {0x9, 0x5, 0x6, 0x41e, 0x9, 0x6}, {0x9, 0x6, 0x3, 0x8, 0x4908c41f, 0x3}, {0x6, 0x6, 0x0, 0x0, 0x3, 0x5}, {0x326, 0x1ff, 0x0, 0x3ff, 0x8001, 0x3ff}, {0xca, 0x438cf15, 0x2, 0x205c, 0x0, 0x7f}, {0x21, 0x7f, 0xfffffff8, 0x7, 0x4, 0x9}, {0x7f, 0x81, 0x8, 0x5, 0x0, 0x5b17b612}, {0x3, 0x6, 0x0, 0x1d, 0x79, 0xfff}, {0xffff8000, 0x77a0, 0x800, 0xfffeffff, 0x5, 0x6}, {0x8, 0x10001, 0x1, 0x5, 0x8000, 0x8}, {0xfffffc01, 0x0, 0x4, 0xffffffff, 0x7, 0x7c00}, {0x101, 0x6, 0x7a3, 0x1, 0x1000, 0x1d0}, {0x7fffffff, 0x20, 0x5, 0x80000001, 0x9, 0x5}, {0x37d8, 0x401, 0x9, 0x81, 0x3f, 0x200}, {0x3f, 0x1, 0x3, 0x7, 0x1f, 0x9}, {0x6, 0x8, 0x2, 0x401, 0x1ff, 0x2}, {0x1, 0x0, 0x7fffffff, 0x0, 0xa, 0x3}, {0x4, 0xfffff800, 0x3f, 0x1, 0x6, 0x81}, {0x8000, 0x1, 0x100, 0xbfe, 0x4, 0xdd3}, {0x0, 0x5, 0x1f, 0x1, 0x95, 0x739}, {0x5, 0xfffffff7, 0x7, 0xfffffffd, 0x80000000, 0x23}, {0xc1b, 0x34, 0x3ff, 0x400, 0x20, 0x401}, {0x401, 0xffffff00, 0x49c, 0x10001, 0x8, 0xad}, {0xacfbffa3, 0x6, 0x3, 0x33d039c1, 0xd43, 0x5}, {0x8001, 0x800, 0x0, 0x8, 0x5, 0x80000000}, {0x8, 0x4, 0x3, 0x12a, 0x7f, 0xff}, {0x3, 0xc7b, 0x54ab, 0xa0a, 0x8, 0x2}, {0x2, 0x7f, 0x7ff, 0x0, 0x9}, {0xba, 0x3, 0x5, 0x20, 0x1, 0x5}, {0x401, 0x5, 0x10001, 0x6, 0x23e, 0x2}, {0x8, 0x80000000, 0x90, 0x2, 0x9, 0x8}, {0xfffffff7, 0xb4, 0xfc000000, 0x7f, 0x81, 0x3ff}, {0x1, 0xffff, 0x737e, 0x3c, 0x8}, {0x26f, 0xffffffff, 0x13, 0x2, 0x1000, 0x1}, {0x101, 0x4, 0x2, 0x6, 0xb7, 0x101}, {0x7, 0xf2, 0x9, 0x6a63a448, 0x7, 0x6}, {0x40, 0x6, 0x23a, 0xa6, 0x1000, 0xfe4d}, {0x77, 0x80000001, 0x10a, 0x401, 0x0, 0xff}, {0x2, 0xffffffed, 0xc4b, 0x7, 0x3, 0x4}, {0x40, 0x6, 0xffffff00, 0x7ff, 0xe87, 0x400}, {0x2, 0xfffffffd, 0x5, 0xc678, 0xfffffff8, 0x7}, {0x20, 0x64, 0x4, 0x5, 0x8, 0x5}, {0x1, 0x6, 0x800, 0x5, 0xffffffff, 0x1}, {0xd7, 0x7fff, 0x5, 0x1242, 0x6, 0x72c16a1b}, {0xfb0000, 0x7, 0x80000000, 0x5, 0x3000, 0x800}, {0x8, 0x1, 0xd, 0x3, 0x101, 0x2}, {0x5dd, 0x0, 0x80000000, 0xff, 0x9, 0x4}, {0xfffffffa, 0x9, 0x8, 0x0, 0x1, 0x20}, {0x7, 0x3c61, 0x3, 0x80000000, 0x0, 0xa4b}, {0x9, 0x1, 0x0, 0x10000, 0x10001, 0xea0}, {0x9, 0x101, 0x9d70, 0x6, 0x0, 0x8000}, {0x8000, 0x7, 0x9, 0xd3, 0x1, 0xffff}, {0x9, 0xb17, 0x1, 0x4, 0xa276, 0x4}, {0xb8, 0x1, 0x12f5, 0x5, 0x8, 0x2}, {0x3f, 0x9, 0x2, 0x4, 0x4, 0x4c10}, {0x5, 0x4, 0xa5000000, 0x7f, 0x5, 0x2040}, {0x5, 0x101, 0x3, 0x3, 0x81, 0x4615}, {0x3, 0x9, 0x6, 0x1f, 0x20, 0x4}, {0x3, 0x1, 0x5, 0x768a5639, 0x40, 0xffffffff}, {0x8, 0x9, 0xffffff51, 0x550, 0xf9, 0x5}, {0x3f, 0x8, 0x0, 0x3, 0x7, 0x400}, {0x33c, 0x7ff, 0x400, 0x1000, 0x7f, 0x4}, {0x3, 0x9, 0x0, 0x80000001, 0x69, 0x8}, {0x2, 0x3, 0x8, 0x7, 0x1, 0x5a}, {0xffffffff, 0x3, 0x7, 0x4, 0xffffff81, 0xa8b0}, {0x400, 0x7fffffff, 0x6, 0x800, 0x10001, 0x7f}, {0x8eb4, 0x7, 0x10001, 0x1, 0xffffffff, 0xa772}, {0x0, 0xc65, 0x3, 0x2, 0x4}, {0x4, 0xff, 0x6, 0x12fdfa9, 0x7fffffff, 0x5}, {0x1, 0x6, 0x4, 0x400, 0x100, 0x8}, {0x5, 0xaa0c, 0x4a5d461e, 0xfb, 0x5, 0x10001}, {0x636, 0xad, 0x10000, 0x7, 0x6, 0x3}, {0x8000, 0x1, 0x40, 0x7d, 0x7fffffff, 0x1}, {0x5, 0x6, 0x400, 0x0, 0x4, 0x6}, {0x3, 0x9, 0x8, 0x7a1, 0xf87f, 0xa6}, {0x8, 0xfffffffc, 0xfffff001, 0x8, 0xc42, 0x80}, {0x7, 0xffffffff, 0xbe, 0x101, 0x60000000, 0x5}, {0x5, 0x5, 0x1ff800, 0x1, 0x3, 0x3}, {0xd2, 0x1, 0xfd9, 0x401, 0x9, 0x6}, {0x2, 0x4, 0x6c, 0x9, 0x9, 0xffff}, {0x5, 0x8, 0x4, 0x9, 0x5ec4, 0x69}, {0x8, 0x7ff, 0xfffffff8, 0x6, 0x6, 0xdda}, {0x4, 0x5, 0x10000, 0xd3, 0x9, 0x5}, {0x2, 0x0, 0xa78, 0x0, 0x100, 0x6}, {0x8, 0x0, 0x11bc, 0x20, 0x101, 0x40}, {0x114f, 0x7, 0x1, 0x603a, 0x1, 0x18000}, {0x100, 0x0, 0x80000001, 0x8, 0x1, 0xbd}, {0xf9d0, 0x3, 0x6, 0x3, 0x3, 0x1}, {0xc0, 0x7, 0x1122, 0x10001, 0x2, 0x5}, {0x6, 0x5, 0x14, 0x80000001, 0x80, 0x1}, {0x1f, 0x800, 0x80000000, 0xad, 0x8, 0x100000}, {0x8, 0x80000000, 0xfe, 0x7, 0x8121, 0xffff8000}, {0x81, 0xa2, 0x515, 0xf, 0x4, 0x7fff}, {0x8, 0x101, 0x81, 0x5, 0x0, 0x9}, {0x0, 0x3, 0x3e28, 0xe6b1, 0x200, 0x67}, {0x81, 0x8, 0x1, 0x7, 0x10000}, {0x4, 0x7fffffff, 0x8, 0x9, 0xffff0f30, 0x80}, {0x4, 0x0, 0xef1, 0xffff5706, 0x0, 0x80000001}, {0x2, 0xb22c, 0x8, 0x1, 0x8, 0x401}, {0x80000000, 0x0, 0x3, 0x2ea, 0x2, 0x9}, {0x40, 0x81, 0x6, 0x6, 0x1, 0x2}, {0x8, 0x0, 0x2, 0x2, 0x7ff}, {0x8, 0x40000, 0x5, 0x1, 0x9, 0x6}, {0x401, 0x1, 0x2f8, 0xc4, 0x70000, 0x43bf}, {0x100, 0x1f, 0x7, 0x6753, 0x7e3, 0x1ff}, {0x7a1, 0x81, 0x3, 0x80, 0x6, 0x5}, {0x8, 0x9, 0x2, 0x1f, 0xae, 0xffffffff}, {0x9299, 0x7fffffff, 0x7, 0xffff, 0x0, 0xf53}, {0x5, 0x4, 0x7, 0x1, 0x1, 0x38000000}, {0x5, 0x25, 0x10001, 0x6efa, 0x0, 0xfffffc01}], [{0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x7}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x7}, {0x5}, {0x3, 0x1}, {0x4}, {0x0, 0xd5c5870990560780}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x5}, {0x2, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x2}]}}]}, {0x59, 0x6, "164ffec2cfa1e008a10d2179c20bde915f256054cc02e0f6d4d809b961c2da715c89d3a9f4464f18674b25a4b85cfc02b6b6e523045322d78055b9c53bf64c8307d3170ca364c4b060b90ad402d685ce00e43ffa13"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x1078, 0x1e, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x428}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0xffffffff, 0x6, 0x1ff, 0x3}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x10}}]}, {0x1004, 0x6, "2830933944375dcd996429f30bed779cbe2ab851551f2a961be668c667b03be468e0e81d48ffc0c9fe7152dfc305b869005cf06044612bf3d68a35a228e93a97fd7498b9839472c74afc675b17714c9bb400c17b2535eab049a05ef0184ecae346d359646ce25a843e8b8fe52c7b7dea00e6c41ec05d97b0500b3e5ce73c6b21e664994cc900d22e56e8068307cc7e22e9a4645633454826c4d6a61a6b789be34659d8545861b232b41c1e876ce4d778c92fd8d4f38de08b2d90c21c7b4c2440601a9efbe0c2f04b252f20ff557936ec355562efc2e6a9be7b236ecaf4c73c44bd02942d1c0b53571c4513be2fdbac58a3cf1e94155b804b4734472ac69b47c521f0fe393737fc4a4e6783e072beb7079290802105ef2fa7333143eb4e47216e48c046596416b0d154a4c510af0d55c0fb500e898b226c8b2bbe765f6a88b8e13a812e74680d1eb6b4787b1dbdfddc71cdc19e8ec563115c5ebd740aa8984fcd2ce2017253bceb12da43ab6c73bc950fdea68adc4795ed7afd8a130be857dfc22c002fd2303230f9c67fb0c8b2fd8c6ae4b5057a546b0df4a718f3e51467f1de76b5a6444c071d51e02699808cc7026e8c3b9f276cbfacd8d76c781a89239bbd9cce83fbac73e39a5168870fa0821f3c4c047e62ac417cfb202805a5cd555d75e7496bd181799e19dabc0c686e15fd1d4008995e2e4747a8274ef5d4e915d3fd76650b16270047f1fdb87a14b095169165766832ae26adc79744e4d90519c94638194f7e0dab6d7bf2d7d0e819787d31a15d6a966575c67299c27eed4de050bb642700bb1362d2ce870688d60fa2651f89f2cee4f571c937b4b7e1f94a5a1b05a261fae2c62230abc088b180f820340ef8e43357917d5207f84309131caea1feefc7c3d3db085eebeb4f6ad710a1c0e01f1c6174345c260684fb21d9b2ec958adf7c6f890ec73358f10e730a576103a6df3831cc7937b867f23e16b1ce56ab4842e5a00c0ac644ea636651a595070e9ca360ec4459432434a590c46e4b0ca406a0e65048637e6fd2e327ab0d724c7746194b9f9f16ca9f63ef80d777e109f94376195cf1c0e17afbc545d662b9c18e9d2d4f3afea4078c7581c0d4f561d5d676ab047248f59f71d3f7b7443a523b06fe9c9a091264b769e99e60a1c4af56bd3b33358b86a2b9cce3b8ac80adc9f939f48b82bc161793ae1902cf314e7157678610882c061cf2bb179e379853b70162ae95228300d1f5ca64dd047400c7198e7dce3e3d976e424ea7abbe53b920716e9c4ffe514ff548938aaa61afd560c982fb614d91c9815213db7e0019dfd68e5e634b7d0b34ec1f23921565191ca3a62f2f89e0aa8488654992aa9dab896e64658aeecdc1e7a1f841427577713afc75c93a9dd3321d778a3deab35558776bd87689bba661a5b3707317ead70cc075642aeefcc08feba7341c7f898801633fe378857e1641c9b16db951683e606086547e2a6bb04be67287a1dddd08cf75788111237b2a671e8a719b92fbfc5d128fb0b0ed47086b8a8c03d044a5abc910daac74fd43cc94b9cdea62f431ae806ac39df7af599699e3165f85abd17ce4e1e387e8cdfd78badb2dc9b9525c83119d6d80489ac7e5a191ac3f71bc3badec8e78454a30da38d4a30d34b4e86929aca099702cd3c44fba65b2c8161b913237be77c5e80cee3032863a4b89c7935ff96339f29400c54660d1571ccae41bc7e5113cd8b52714bd373c02db6c42d6b4b0c73810635552b2a09def00e32c92e04f82dbbd55e957fe4766799e90c1e6d52f0b63016256052a2f6f6de7c864255ee26321780a09262d8d09235f9c0ebea03ad0baeb2cbb6b1f234b8ff6571db8bae3f56794f0228a58f5a42996bc466da2771b811d87b209cc72ca9cf9447fb9a70acf5e07f7ca38e6a882552b67bfc57d22ab19d4f0ea179fbe549a47e5283a0810392b523a24fe93953deba2d4066ca67245b7b9fe94d26fc1b07a9e9db00aa1bd64d9737ee534d1f706481528101ddd729ce535807d6666be775dda176d94ead7769ad264b7568065d1f861e118ebc280a915df4cf9941a374e78f56228fe2bb3b0659ca02923484632c72180a8e88fc7ad2acb5583655254a67e51821701296dd139a7acb254a30296e6838a8e8e41b5af4b5db8b736e8c7c9b98c790fc1ffb4059ac264add4105e1b8f9079deca3f7b850a50a893ead1b2166f6df246ac6929a9341f751b882d06c444d038cd942af4df6b31cf8ef5bd756c2e6680709cc619e2f3f8a642586a71263b10102e56c6687f3388f6f48ac8d24fb771abf048c7e0618f92596f01586870c153994e669a68968ea97ca5d5497908c58c80b10f3b1beac6c9dc79bf398d4b21163199ad68b34d158a60c6eea05c8409185acebbe7ed4d495933c449fa1f8c61bfce491b15549b139182bd4eef647c307e0cb395cfa36431fead4a724ff564183248bfab10c92031ae36680ec4d9f27239debb55d51e40f374fc30bc3af562da3339eb41aeca0641667a70020e08b55efc9f1bc1c5ff2d75346aa6e7686f021443540c6fba63eef72ec229f435e2b6375a7594a6b051b85ebf78bc51220eb5f1dbb0c8fa5d3162b99775c8cd29cbf6c427fdcaaee4accf9cc01a278c3d24ef0abf286645cbd27de3554eac6d88dade0d0475368d382a89f73e921d2218d2f6ae5380699183979a4cbb4dc58e24a4f866197151084990cf2b7fcc07fecaeea39e81d2ee5386579c084e7be64531042a456695ea40b73811550c5499ac9622b1af71d81f4bde93072139444b63084fbad347e709512c4f7fed4eb58151e42c4f1f0485785907155b1d2f937fba33ff7003b5e353606974a294b0946b3906ca22089b49fc99c871037674f262967ab1533cf2a0ced5192464d9a61ed1f168e0011640158ade416f150cc22dfec11fb7e8f7776b5337236bc98a9858e6723a67a9d7b8025d246e5e7c84b343dd0fa5c88c0673f3b1f2682e6a09664ac96cd0bfb17a4fb68b0c6393f82d557850105406de7c83cfe966fad16c3f480323bccca3696f87e3407609be34daa0d27deed42e4163a1992dd3ba2dccbac2d7d6f295e9e8c99fe7067bfd29fb00fb0dc1c573361c0a1ff16fb56d694a94ae91d451b6583f3b5694ebb0a8376c9a4b00df617fe5da225b6121e72c4022997ba945a3cc78110e6c954ea4bac2dd296af48bcbcbecf1dba0b694b474f2dc24faa852b8487f2187344e90bb14b6892cf476820b958ad43a636a05e38615bb5caa383c5db60612120b3cbce32ab438f55b646dc055e4117f23f3aa5a81a5a014b90d9f4eb783d01a4036176300449d77c00066aa4c2ddae2b674583242af51f080e4ff170507a3c0405f3560bc6e70d184d64cd874851ead1a6b77510c90092c98fc5fb97f561a21d0903ea4c9e8c89b0272f7589f82dbc3e51b89f0c7c11cf4525d239ffc8a1f1d136a948a041de7642f8ba4ffbd8cae10c76995ea28cdc6bc1b229affe96341dc3386373a87ea4da0e35afe5c2b956643b08c2224da322fab2d6822f83475942da3c5f2a57ec78ddee740376a47c5df2b7fbe9e983489ee5df571f255b96f8a73ae8e0a1b0b11fb2aa0e0ed84bc73c4871c1f8f48f4250c96818d22192e463a451383b5e3778d36f4a0f59b44ac71da59fa148ee832a9a186abdcb551eda50416049c4cb26fddc3cfa838c8d34e288686fe939780d7a3d84d0c2b396d756e36762cb20d20a44525c5e3e27b7ac8584496610e344e84204816ef55c7b4b8769c5ec3a549b8c0229dcc5a97bd7e71684e918d24c76110927260f3e8e432c0495a94c64240f84f4345d0372f6cc96889919311c55cfcb96f264daef9f775be6e06fdc65276f97e20fb1b346b33ee05c7dfc4ab1cec310bf42a96a40617cb009505ed26f1032be20f0ccf7daa57f72675d836c7d098add24a8150b5be32cc53308e7e1285399bc1308ae96bb737668cd679aa651d43778556a5aabb7432a4ddfcae1b1c08d0388060c0579661efa2fe086995a7346ae2239927b19ee69968bdbe7f47ef49b848ab10d30b7a36a7813ddf81a4cc9950c1a54b01bd78faf110526fafbad58f4fab3761d0ccc38e37cef84aa999e0319694355fa2d0fd1f3f3181db6b4fd21df15f02bd16a47b5c161d99caf6bf516dffcb5e613656d9fae5740241838ec8a487c8a6ad0a32615a9331609a2c10081e7582a7a134c6b4374771d10b4ad1f24625186b2941ab24fbd16cfadc1c20693da4828a874d93189425b24420e9b055eac1b519d48f2c089c5eb74edc58ea09b0e2caedff045f2da14954824693eca05b5a9dcbb9aeb1db5abdf058024055e8a86f616888eca50c05b621c9cdb2ac309d58ca62d2f78805bad15d3a433f5fa73f2caa6aaf0bedc0b959241793360c5b9ad9e8a9b1780ff2d551e12d9ce9ff058de1edd2996ec97d6d8c61f0c8522f32d6b55cd2a075a29e667fad8417f7cbda64d843d144f7515ae5a865153290bd1d96150d226c5442c59964eca25b34656360052408a444c28030ae03c29de0fb5b9d206fa82230df8fa1cd339d88c7812160255f6c7efa165e9ac709a0971058c3153e1ac8cd6717a830b110c915a1abe02794aa39b3403000ecaf8ae3963bdfc5b3f665a42753a72ad513961a92b176d41d4cd2478c358315edcf1e00a8701e2d4aa8310e33d03b8f996ab2de13d9a4b1fc57130df2075daad2cf7c5e5f0006a85ea2ee8263a421113ff3bce9a9925ec91cce64be8c699b8f1d85d1f23f316650aa6b0fba777f899717b17f99f0c9fddcf348ac332a012ecd24a2a411bb1afc843f29a21d5d83d981b4d318376a72b84d764d3ab3784a3116d00a5caa333214d4aa9c58a4919b8eb34a87a66e7ec837f1877839a7491ef2295f0121aa22a323ae1ca9b034dcb0bff828b1ece24342ad95ac5fc5bbaadfa9d980b220a34c439c10710b5dc03c4abda59569bf534930f18a59a974796a9d6437e76132eb346474c8d18697675057bb8d16094954d9568c4dc57e55c6db7e2da20f4a15d79d207a1b5ce5f27f51be97dda91e30b92cb9793ca2cc4fd242f98573d60b3bbd28e4cbead715c33d4e9d2b587b3eca597b8069444ce02c75cff6bcb536f238dcd259e7488bd1e8394eb97138edd4d3ae4b2a3b173275580fbed6ac2ae16c33c62cdc6a5837911366e2dbdc898b14fba6511102a5f4a1912b0a0290df37d59de6ea16a355a640af0daa014febe72e45a0ea93da5301550708b07f5c480c6e9f3aa48b23d2cb7021ea1f5910c87a402ebd9321a9b190097b4aa2a52e2c858aa1b4357374834b093166314c7e0f592e37389b181d01e9b4dda1b88ea5a34dfb7ff2e3064e87a066cbe0ceac63fe9bd4048e1f9ac8d5cef68f3bab12d8ec3c1acce735d5b22a6d342777f7ba0dcf6f43e79d9e1f42da41bb52707a681d31a5b2bec7ca857c8e7bbd941d395aa1b524e6d4515fd4c5f27e814f767e7f9e1708052261945b461c3bb28553c9772192c9cd0dca8e492e04945d19746fd1ce5e070cd47b1e6a5785bf64838bdffa664694934a469fd18e66b04b9e056d3f86ae5908735aa658ba6047e224f5cf2c14d0d2f4bf467848e0bf240aff3c7646906d70b92184d250e485bf110f7e87391673f98c088f04a267171a78a34ceb4e27346a1f51ead890a6e8da3227d8ce7c27e3009ec10b27eec0ebd185bca9b062634f1ab6d86a6bafecc79d41596e3d4642f02bf469febb1bf8d5ffd90d15fec0d6c200bc7e26314349e47e7f2a6bec6a0b019e28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x114, 0x1b, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0xd5, 0x6, "f71a31dcdea4abeb08658aea86dd6b3306af777c37c5013597a7fa520f36c684646d3d51d051732b6bbb667b7388eda3999701ed2461efdb109d07417358f3ec8ce24bc30ad091a060916c910c444ef5e87f7e4143676cae0e6816fb1720ce553463f8e02d53356c6efa9ea92ede8528c7d7b34965c5a3fcda359a8a6c5e31db5f5b5eb99d84ac22cb43662b819367ab004d4b7d5f56c2fd4503ee1ca44a09ed998e4e5fcb2e0e89deedc44521c42d6f0f8950022e7a1247daf5d9eef9c9cd111a97918b40dd33849e66b668bb99201fd6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x2ab8, 0x1a, 0x0, 0x0, {{0xb}, {0x1a8c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7f, 0x742deb44, 0x7b67, 0x1ff, 0x8001, 0x466, 0x5, 0x0, 0x7, 0x1, 0xffffffe1, 0x7ff, 0xfffffffb, 0x2400, 0x8, 0xffff, 0x2, 0xff, 0xfffffffe, 0x9, 0x8, 0x3, 0x8001, 0x4, 0x4, 0x101, 0x7, 0x4, 0x81, 0x1, 0x8, 0x1, 0xff, 0x5, 0x8000, 0x401, 0x7, 0x6, 0x6, 0x20, 0x7, 0x7, 0x5, 0x1, 0x401, 0x8000, 0x7, 0xfffffffc, 0x8, 0x0, 0x3ff, 0xe32, 0x1000, 0x80, 0x6, 0x1, 0x0, 0x2, 0x65f, 0x0, 0x4, 0xf9, 0x4, 0x0, 0x2, 0x83ad, 0x8, 0x0, 0x78, 0x4, 0x5, 0x2a, 0x0, 0x5, 0x4, 0x7, 0x4, 0x1, 0x800, 0xa4, 0x8000, 0x4, 0x7, 0x5, 0xfb96, 0xffff9a22, 0x675a, 0xdf93, 0x373, 0x100, 0x1f, 0x71b, 0x1c0000, 0x7, 0x3, 0x2, 0x1000, 0x0, 0x9, 0x81, 0x80, 0x401, 0x3, 0x5cf, 0x5, 0x5, 0x1, 0xee0f, 0x1ff, 0xfffffffe, 0x4, 0x7fff, 0x1, 0x7, 0x80, 0x7f, 0x1000, 0x26, 0x7, 0x4, 0xff, 0x8, 0x80, 0x4ee51b8d, 0x3, 0x2, 0x10000, 0x7, 0xffff, 0x6, 0x8e, 0x0, 0x80000001, 0x400, 0x4, 0x200, 0x6, 0x9, 0x7ff, 0x4, 0x9, 0xff, 0x200, 0x1000, 0x0, 0x68, 0x8, 0x8, 0x3, 0x4, 0x2, 0x9ed, 0x1, 0x7, 0x5, 0x7, 0x401, 0x9, 0x7ff, 0x5, 0x7, 0x80, 0x986, 0x40, 0x2, 0x4, 0xfffff801, 0x92, 0xfffffffd, 0x8, 0x293100, 0x3, 0x3, 0x6, 0x9, 0x9, 0x2, 0x9, 0x6, 0x7f, 0x6, 0x5, 0x1f, 0x5, 0x6cd7, 0x4, 0x3, 0xfffffffd, 0x5, 0x3f, 0x9, 0x40, 0x4, 0x40c, 0x9, 0x401, 0x5, 0x3, 0x5, 0xff, 0x8, 0x7, 0xfffffff9, 0x4, 0x100, 0x0, 0xfa8, 0x80000000, 0x1, 0x8, 0x1f, 0x816, 0x1, 0x800, 0x10000, 0xfffffffc, 0x9, 0x81, 0x0, 0x3, 0x51, 0x6, 0x6, 0x1, 0x7, 0x1, 0x3, 0x0, 0x0, 0x5, 0x7, 0x7, 0x0, 0xb5, 0x40, 0x10000, 0x3, 0x300, 0xff, 0x7fffffff, 0x8, 0x2, 0x6, 0x6, 0x7f, 0x6, 0x101, 0x1000, 0x5, 0x5, 0x80000000, 0x8, 0x35fc, 0xffffc444, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8001, 0x6, 0x2, 0x10001, 0xfffffff9, 0x40, 0x3, 0x800, 0x4, 0x2, 0x6, 0x80000000, 0x81, 0x6, 0xfffff000, 0x10000, 0x6, 0x10000, 0x20, 0xfd, 0x8eb, 0x5, 0xa23, 0xffffffff, 0x1000, 0x20, 0x3, 0xfff, 0x200, 0x40, 0xfffffe01, 0x8, 0x800080, 0x5, 0x5, 0x10000, 0x4, 0x5, 0x0, 0x3ff, 0xbc2, 0x2ba, 0x7, 0x1f, 0x8998, 0x6, 0x8, 0x6d4, 0x10000, 0x4, 0x10001, 0x400, 0x4, 0x3f, 0x62e3, 0x800, 0x0, 0x80, 0x4, 0x8000, 0x9, 0x6, 0xfffff682, 0x1b5, 0x1, 0x401, 0x80000001, 0x6, 0x8, 0x9, 0xffffffff, 0x6, 0x1, 0x5, 0x1, 0x3, 0x80000001, 0x0, 0xfe, 0xfff, 0x1f, 0x1, 0x6, 0x7, 0x1, 0x9, 0x5, 0x98d, 0xbf99, 0x6, 0x40, 0x7, 0x0, 0x7fffffff, 0x10000, 0x2a2, 0xc1e, 0x3, 0x2, 0x4, 0x1, 0x0, 0x4, 0x3, 0x9, 0xffff, 0x1, 0x7, 0x3, 0x1, 0x8, 0x5, 0x7, 0x4, 0x44, 0x1, 0x9, 0x7, 0x8, 0x109, 0x3, 0x9, 0x7, 0x1f, 0x10000, 0x629, 0x6, 0x10000, 0x30, 0x1000, 0x7, 0x3017, 0x10000, 0x0, 0x1, 0xe6f, 0xffff, 0x3f, 0xff, 0x4, 0xffff, 0x722, 0x11a000, 0x7, 0xffffffff, 0x7, 0x0, 0x3f, 0x3, 0x9fdc095, 0xdf3, 0x6, 0x1, 0x1, 0x8, 0x8, 0xffffffff, 0x2, 0x5, 0x6, 0x4, 0x1, 0x1cdf, 0x9, 0x9, 0xfffffffc, 0x21, 0x8000, 0x1, 0x9, 0x7, 0x5, 0x996, 0x3, 0xffffffff, 0x8000, 0xfffffff9, 0x7, 0x0, 0x52c9, 0x7, 0x3, 0x7e0, 0xe1c, 0x0, 0x7, 0x0, 0x3, 0x1, 0x1, 0x8, 0xa5ab, 0x2, 0x196c, 0x6, 0x88c, 0x3, 0xda2, 0xffffffff, 0x8, 0x9, 0xffffffff, 0x1, 0x6, 0x8001, 0xfc53, 0xcf07, 0x733acbb6, 0xfffeffff, 0x5, 0x8, 0xfffffe01, 0x7, 0x9, 0x1f, 0x7, 0x6, 0xffffffff, 0x75, 0xfffff969, 0x5, 0x56c7, 0x3, 0x0, 0x8, 0xc4, 0x2, 0x1ff, 0x6, 0x200, 0xff, 0x0, 0xf1b4, 0xfffffe00, 0x3, 0x1000, 0x8c, 0xb4c9, 0x7fffffff, 0x9, 0x0, 0x5, 0x3, 0x15bd4a55, 0x81, 0x5, 0x19e96025, 0x4be, 0x4, 0x8, 0x0, 0xffffffff, 0x1, 0x5, 0xfff]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9a6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x401, 0x6, 0x6, 0x6dd, 0x5, 0x6, 0x7f, 0x0, 0x7f, 0x0, 0x8, 0x8000, 0xffff, 0x2, 0x21a2, 0x99a, 0x1, 0x8, 0x400, 0xe9, 0x6, 0x101, 0x1ff, 0x0, 0x2, 0x8, 0x6, 0xb91, 0x800, 0x2, 0x3d7, 0x67887604, 0x5, 0x7, 0x7ccc4b05, 0x1f, 0x1, 0xfffffffa, 0xf7, 0x101, 0x715, 0x7ff, 0x1, 0x3ff, 0x1e, 0x5, 0x8, 0x3, 0x80000001, 0x83, 0x2d, 0xb83, 0x1, 0x4, 0x750, 0x6, 0x30, 0x401, 0x5, 0x9948, 0x5, 0x200000, 0x6, 0x2, 0x7d02, 0x8000, 0x1000, 0x4, 0x8, 0x8, 0xf588, 0x1, 0x7ff, 0x7000, 0x6, 0x7ff, 0x3, 0x2, 0x3, 0x0, 0x9e8f, 0x0, 0x4, 0xdd, 0xd5fb, 0x6, 0xffff, 0x4, 0xf8a4, 0x2792, 0x4, 0x9, 0x0, 0x3, 0x7, 0x7d, 0xba43, 0x8, 0x1, 0x1, 0x9, 0x10000, 0x7f, 0xee8c, 0x7fff, 0x4e16, 0x1, 0x6, 0x5, 0xd9, 0xfffc0000, 0x4, 0xb8, 0x9, 0xfffffff9, 0x7, 0xf5, 0x1, 0x40, 0x7c, 0x8, 0x8, 0x4, 0x9, 0x1f, 0x9, 0x9, 0x8, 0x5efb, 0x53, 0x0, 0x1, 0x2, 0x6, 0x9, 0x3ff, 0xff, 0x6, 0x4, 0x58, 0xff, 0x5, 0xd3d2, 0x656, 0xc9, 0xbf, 0xff, 0x4, 0x9, 0xffffffff, 0x8, 0x3, 0x4, 0x3, 0x3f, 0x7, 0x80000000, 0x1ff, 0xeb, 0x2, 0x7f, 0x1, 0x9, 0xfb1e, 0x5, 0x800, 0x3, 0x8, 0xfffffff9, 0x1, 0x7e7e, 0x200, 0x2, 0x1000, 0x3, 0x4, 0x9, 0x1, 0x2, 0xc18, 0x2, 0x800, 0x9, 0x4, 0x5, 0xc24c000, 0x6, 0xa7f3, 0x1, 0xfff, 0x85c5, 0x0, 0x7fffffff, 0x40, 0x2, 0x84f, 0x7, 0x2, 0x0, 0x2, 0x8, 0x7, 0x9, 0x2, 0x1000000, 0xffff, 0x7, 0x118, 0x6, 0x10000, 0x7, 0xfff, 0x8, 0x2, 0x7, 0x2, 0x9, 0x17ab, 0xffff, 0xffff, 0x4, 0x20, 0xce1, 0xfffffffb, 0x4, 0x7, 0x8, 0x0, 0x9, 0x0, 0x10000, 0x0, 0x6, 0x1ff, 0x15, 0x20, 0x2, 0x8, 0x6, 0x1, 0x9, 0x8, 0x400, 0x0, 0x7, 0x7, 0x5, 0x0, 0x7, 0x6, 0x20, 0x101d, 0x95, 0x9, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x2, 0x1, 0x6, 0x1, {0x1, 0x1, 0x4, 0x9, 0x61a, 0x7fff}, {0x88, 0x1, 0x9, 0xd06b, 0x3}, 0x3cb6, 0xbbba, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x8, 0xfffffff8, 0x8, 0x0, {0x2, 0x1, 0x9, 0x20, 0x9, 0x3}, {0xa5, 0x2, 0x100, 0x5, 0x3ff, 0x1f}, 0xe6, 0x71a, 0x8001}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe6c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x3, 0x9, 0x7fffffff, 0x4, 0x100, 0x3, 0x4, 0x3, 0x8001, 0x6, 0x6, 0x4, 0x8, 0x9, 0xeb, 0x4, 0x0, 0x1f, 0x2, 0x80000001, 0x934, 0x81, 0x773, 0x6f1f, 0x9, 0x337, 0x0, 0x10001, 0x5, 0x4, 0xd8, 0xff, 0x3f, 0x5, 0x6, 0x0, 0xfffffff8, 0x3, 0x6, 0xfff, 0x0, 0x3, 0x20, 0x5, 0x400, 0xdd, 0x5, 0x7fffffff, 0x81, 0xf05, 0xffff, 0x9, 0x10001, 0x8, 0x4, 0x4, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0xff, 0xfffffffa, 0x5, 0xffffffff, 0x2, 0x0, 0x437d, 0x1, 0x1, 0x8, 0xe6, 0x1, 0x9bae, 0x8, 0x80000001, 0x0, 0x80000001, 0x101, 0x0, 0x3, 0x8000, 0x6, 0x4, 0x400, 0x4, 0x4, 0x2, 0x4, 0x6, 0xffff, 0x6, 0x6, 0x100, 0x3, 0x1f80, 0x1000, 0x800, 0x2, 0x80, 0x0, 0x8, 0x81, 0x8000, 0x4, 0x7fff, 0x7c, 0xffffffff, 0x1, 0xd2, 0x2, 0x7ff, 0x80, 0x9177, 0x80400000, 0x5, 0x81, 0x4, 0x6, 0x80000000, 0x0, 0x9, 0x0, 0x11642cac, 0x936, 0x80000000, 0x6, 0x2, 0x4, 0x9, 0x4, 0x2, 0x9, 0x6168, 0x5, 0x100, 0x4, 0x5, 0x3ff, 0x0, 0x3fff800, 0x1, 0x519, 0x0, 0x8001, 0xeee, 0x9, 0xff, 0x0, 0xfffffe00, 0x4, 0x1, 0x4, 0x2, 0x0, 0xffffffff, 0x1, 0x7, 0x221f5295, 0x1, 0x4, 0x68, 0x3, 0x400, 0x6, 0x58, 0x0, 0x740, 0x7, 0x0, 0xd6a4, 0xec, 0x2, 0x1, 0x0, 0x4, 0x1, 0x8, 0x200, 0x3, 0x6, 0x3ff, 0x9, 0x4, 0x6, 0x7, 0x7ff, 0x5, 0xfffff800, 0x1, 0xfffffffc, 0x7, 0x10000, 0xfffffff7, 0x3, 0x1, 0x6, 0x7, 0x8, 0x9d, 0x2, 0x3, 0x4, 0x6, 0x9, 0x3, 0x8, 0x7, 0x7ff, 0xc23, 0x1, 0x8000, 0x3f, 0xfffffff8, 0x6, 0x3, 0x8, 0x64, 0x2, 0x80000000, 0x9, 0x1f, 0x400, 0x1cda, 0x4, 0x27c, 0x0, 0xf62, 0x81, 0x9ee, 0x800, 0x5, 0x0, 0x0, 0x2, 0xed0, 0x5, 0x4, 0x20, 0x9, 0x8, 0x2e, 0x5, 0x401, 0x20ad, 0x4, 0xa6f, 0x1, 0x0, 0x5, 0x7, 0x40, 0x7, 0x77e00000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x42}, @TCA_POLICE_RATE={0x404, 0x2, [0x14dffcbf, 0x13, 0x4, 0x496, 0x6, 0x4, 0xee, 0xff, 0x5, 0xf4000000, 0x2b0c, 0x1, 0x1, 0xf831, 0xbfa5, 0xb235, 0x8, 0x4, 0xfff, 0x3, 0x9, 0x7, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4916, 0xffffffc1, 0x2, 0xfffffff8, 0x8, 0xffffffff, 0x2, 0x5, 0x2, 0x8, 0x100, 0x0, 0x7fffffff, 0x1, 0xd664, 0x5, 0x8d5, 0x6, 0xffffff67, 0x5, 0x9, 0x7f, 0x6, 0xfffffffc, 0x0, 0x3, 0x80000001, 0x0, 0xffff, 0x1, 0x1, 0x3, 0x7, 0x3ff, 0x1, 0xffffffff, 0x1, 0x10001, 0x9, 0x2, 0x8, 0x5, 0xfffffffa, 0x9, 0x2e95, 0x4, 0x8000, 0x7, 0x9, 0x3ff, 0x3, 0x5, 0x10, 0x0, 0x2, 0x1000, 0x6, 0x67, 0x3, 0x2, 0x4, 0x8, 0x7ff, 0x2, 0x4, 0x2, 0x836, 0x800, 0xffff, 0x4, 0x7f, 0x9, 0x533, 0x1, 0xff, 0x1, 0xe34, 0x4, 0x4, 0x7, 0xfff, 0x51e1, 0x4, 0x8, 0x40000000, 0x8, 0x40, 0x8, 0x4, 0x2, 0x8, 0x5, 0x1, 0x11, 0x6, 0xfffffff8, 0x10001, 0x7f, 0xffffffff, 0x2, 0x1, 0x9e, 0x1, 0x7, 0x4, 0x4, 0x0, 0x7, 0x9, 0x9, 0x1, 0x0, 0x7ce9, 0x0, 0xffffffe0, 0x1ff, 0x8, 0x0, 0xffffff66, 0x3, 0x100000, 0x75cb, 0x100, 0x9c, 0xecd5, 0x10, 0x4, 0xf, 0x42, 0x2, 0x1, 0x4, 0x1, 0x2, 0x1, 0xffff, 0x100, 0x0, 0x7ff, 0x2, 0x0, 0xba, 0x1f, 0x1f, 0xfffffffe, 0x5, 0x5, 0x60a2, 0x8, 0xa9, 0x7, 0x1, 0x9, 0x4, 0x5, 0x7, 0x6, 0x3ff, 0xecfe, 0x0, 0x0, 0x6, 0x22, 0x6, 0x9e, 0x1, 0x3, 0x7ff, 0x1ff, 0x2, 0x1, 0x538, 0x5, 0x1, 0x0, 0x1587fef9, 0x5, 0x5, 0x20, 0x1, 0x0, 0x7, 0x3, 0x9, 0x8, 0x7ff, 0x0, 0x9, 0x8, 0x3, 0x355, 0x7, 0x2, 0x5, 0xfffff2e9, 0x8, 0x1, 0x81, 0x9, 0x7fff, 0xeb, 0x73, 0x9, 0xaca, 0x7, 0x7f, 0x452, 0x1, 0xae0, 0x9, 0x1, 0x1, 0x6, 0x80000000, 0x100000, 0x0, 0x8, 0xad, 0xd520, 0xb, 0x80, 0x7, 0x9, 0x3, 0xffffffff, 0xfffffff9, 0x6]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x80000000, 0x19d70000, 0x5, {0x9, 0x1, 0x1, 0xb4, 0x7}, {0x2, 0x2, 0x4c, 0x5, 0xb3, 0x2}, 0x7ff, 0x9, 0x10001}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x0, 0x0, 0xffff, 0xffff, 0x6, 0x4, 0x4, 0x4, 0x9, 0x7, 0x3, 0x5, 0x6, 0xfff, 0x10001, 0xfff, 0x40, 0x1, 0x66, 0x9, 0x4, 0x3, 0x9, 0x800, 0x0, 0x3ff, 0x6, 0x7, 0x8, 0x80, 0x9, 0x2000000, 0x8, 0x1ff, 0x9, 0x8000, 0x7ff, 0x4, 0x3ff, 0x100000, 0xcdd, 0x0, 0xcf26, 0x7, 0x7, 0x31a, 0x9, 0x3, 0xfffffff7, 0x7, 0x6df, 0x4, 0x7, 0x3ff, 0x4, 0x4, 0xc46, 0x7fffffff, 0x7, 0x2, 0x401, 0xa720, 0x7, 0x9, 0x7, 0x9, 0xf0, 0x7, 0x8, 0x0, 0x0, 0x8000, 0x6ea, 0xda9, 0x7, 0x9, 0x4, 0x9, 0x3, 0x289, 0x2, 0x7fffffff, 0xfe5, 0x7fffffff, 0xff, 0x8bfa, 0x10001, 0x7f, 0x9, 0x3, 0x3006, 0x80, 0x7d, 0x5, 0x34, 0x7, 0x8, 0x1, 0x1000, 0x8000, 0x101, 0xfff, 0xffff, 0x0, 0x2, 0x35dd, 0x8, 0x1ff, 0x40, 0x1ff, 0x302, 0x4, 0xf05, 0x69, 0x6, 0x3, 0x5, 0xfffffffd, 0xfff, 0x9, 0xa7, 0x1, 0x8, 0x1f0c, 0x3, 0x13, 0x6, 0x3, 0xffffffc6, 0x0, 0x9, 0x38, 0x0, 0x400, 0x3, 0x8, 0x58, 0x101, 0x2, 0x1000, 0xc8b4, 0x6, 0x9, 0x5, 0x1, 0x3, 0x47d0f737, 0x7, 0x80000000, 0x6, 0x5c68, 0x8, 0x1, 0x3f, 0x81, 0xfffffff7, 0x7ff, 0x91f, 0x10001, 0x0, 0x8, 0xe9f, 0x0, 0x2, 0x38424e32, 0x7ff, 0x9, 0x9, 0x2, 0x3f, 0x4, 0x7, 0x1, 0x6, 0x6, 0x5, 0x1, 0x7, 0x2a1e, 0x3, 0x7, 0xed2, 0x8, 0xfffffbff, 0x1000, 0x6e, 0xfff, 0x1a, 0x4, 0x3, 0x40, 0x8000, 0x10001, 0xb2, 0x1d7a, 0x8, 0x5, 0xff, 0x65, 0x1b3a, 0x4310, 0xd36, 0x100, 0x9, 0x8, 0x80000000, 0x8, 0x2, 0xea0, 0x6, 0x8, 0x8, 0x9, 0x20, 0x2, 0xff, 0x3, 0x3, 0x9, 0x1, 0x5, 0x1db, 0x9, 0x3, 0x400, 0x5, 0x1, 0x9, 0x8, 0xd6, 0x8, 0x8, 0x81, 0x3dd, 0x7fffffff, 0x8, 0x9, 0x800, 0x5fd5ee32, 0x2, 0x4, 0x5, 0x3ff, 0x8000, 0xfff, 0x9, 0x1, 0x9, 0x9, 0x80, 0x7, 0x0, 0x2800000, 0x7, 0xf377]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x9, 0x4, 0x3, {0x1, 0x2, 0x11, 0x5, 0x7, 0x200}, {0x5, 0x2, 0x3, 0x1, 0xcd}, 0x2, 0x7fff, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x50, 0x0, 0x101, {0x2b, 0x0, 0x3, 0x2, 0xfff, 0x200}, {0x7, 0x2, 0x400, 0x2, 0x5, 0x15}, 0x3, 0xb0, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x1, 0x0, 0x3, 0x0, {0x20, 0x0, 0x7608, 0x1, 0x7, 0xfffffffd}, {0xbe, 0x0, 0x81, 0x3, 0x3b34, 0x4}, 0x7, 0x4f22, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8b}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x2, 0x8fce, 0x6, 0xffffffff, {0x7f, 0x1, 0x3ff, 0x3f, 0x1, 0x701}, {0x2, 0x0, 0x9b0, 0x9, 0x1, 0x1ff}, 0x76c6, 0x6, 0x80}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x100000, 0x80000000, 0x80000000, {0x8, 0x0, 0x20, 0x8001, 0x9, 0x7fff}, {0x63, 0x1, 0x8, 0x8000, 0x9, 0x5}, 0x5, 0x3, 0xfffffd25}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x144, 0x15, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xd1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x40}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x5, 0x7, 0x7, 0xffffffff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x8000, 0x7, 0x7, 0x8f}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0xb8, 0x6, "1450c4141c77559c841a302214aeffa6c52ea7e65cde9cc90a4c028af48813ebd8959f721dbdbd697bcaa76535cf307d9f23c6028eba7e80cc815a7e1c940f54f3e8bef356ddb0ab3abb2b3cbddab80c52d0c3b2bff93a3944b585df1cab2a4812adbbaebe35358f4466bf2aaa2ca48f3cf011c347cbd3f40abaa759ad9f4228178277b5774c3174eb96fd9886a1d1db28ad3b8e05f985ac1bf25b733296cd6ff96b63755950f09e7b86e483a5928d58fb70b623"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x1278, 0x1, [@m_mirred={0x16c, 0x17, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x0, 0x1, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x8, 0x4, 0x1, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd8e, 0x80000001, 0xffffffffffffffff, 0x2, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x4, 0xffff, 0x3f}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x5, 0x60000, 0x26868535}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x8, 0x3, 0x7fffffff, 0x100}, 0x3}}]}, {0x5f, 0x6, "4b5064e1cb99fdd7328d394417b39ebd3c4291ce58ab4bccb5ec7486d765f4e1fd42ec98450c36d8f1f273265d5155603b9539685a80de5310d1062d579a827a59992c8fb3dc6727b56ca0a60ceb4589756ae27d15f10f61a128db"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xc8, 0x4, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0x6, 0x20000000, 0x80, 0x8000}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1f61d}]}, {0x75, 0x6, "2f7ecfb4786987c2b1aeabc7dafff0409f7ab82cd2235d059620229f0ff5711b82128a21db494031b68769b568196b60e304d70911238ec99cf4e7ab453a1a520fc2c32be24519612e08d8b604e6f876db467b48695e5bd06f25708c3dc6c1a1ecbf7b7749586999cdc058822608645b3b"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x1040, 0xa, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x2e509f577a65fcc6}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x588, 0x1, [@m_ct={0x138, 0xb, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0xf3, 0x6, "345bd119f5343e8a5a77b0a0e8fdd51eb6b018c5a48df4c4734d0768e1dd204a6d960639ddd48e94574ce1cf3773c547df1b98d185818bb0126344696cdbefc4c03e5a1b4105a3338235d90fdecaf713ece9af5a7b4fb2bd637e3687fc09c5d04827772e9f38aa3530dea17bd98a82f78a23059e5a707a75c94d6ff19e55c549fcd4beb5178ecb986dd044030751e1b7a9f9b43e54dc4488711516a892eba2b7ff2f7fa0d25aefb13e1215ff92904ece5b09c07b1fcc3389ae8c15a6537776dba522c8d77d3dc672e80a124f5f80681350f0d7816f73b70414ef28b31acdb03daff6c0513112a3edb761ab1465dfc7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x9c, 0xd, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000001, 0x401, 0x6, 0x9, 0xfff}, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x80000001, 0x6, 0x5, 0x9}, 0xe}}]}, {0x11, 0x6, "d84cde966eb6e4cef511a67987"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x74, 0x8, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x1, 0x101, 0x11c}, 0x2}}]}, {0x2a, 0x6, "8638259f6578fdcae7ef6c1fc6539eb688f4a2706e600e22224c7871418c319615d36f4f3ddd"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x87, 0x6, "8154f541d6bb02196a6f4b5c733b1f9e04caaf57b6a2f27235f5ac1a4195cb72ba96bced9f0be596583192c41bb87c3b980cbf6d479b2c04d4463d6f976873dfce96efd485e8c7119fd5c8d126d3984529af608eb2af988a1abd724bc3b03916be4fe62948d75d747ee3ad61964c7dee4a94d4d9888dee5aad3ff4593c9ae816eb4fac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x190, 0xf, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0x7f}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x8, 0x7, 0x7, 0x9}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc41, 0x9, 0x0, 0x3000, 0x80}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfffffffa, 0x6, 0x6, 0x1f}, 0x33}}]}, {0xf2, 0x6, "6535dde4e5c0bfaf1fdb8be253d0b23a7dea43e07d05ab062edc1e6f5a7a2371f881cb430d14ef94c2f8000921914f3d8c3dcce8a4fb40458218ff4b52da426b561bc15668b9ab1ab074588c11f8f9d2b16b4abfd534b29591b05bd5a80d536e3b751d6f9f8f8ff4725050a877a06f1b6419cf1767b863cc7cdb6fe4281b7046d20f22eb40b8452c766eac6cc90ee4967d16434ac0d9d2355d3e793fbffe04a14766f0efde0fba50b25187881d6ab4fc4ff318c00bd8b9221f4a1b54aab12086ee98a57efb3798dacf9b8fc6d1331eb36a65e1f954670fcebff95e1c4c75a6783f1a0fcbe0b741c9d98d8856a325"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x74, 0xf, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7cab, 0x1, 0x0, 0x400, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x8, 0x6, "99e867ec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x84, 0x7, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xab60}]}, {0x4f, 0x6, "4f6b27d214257fb5189a09acceb8743278a247900c584f612d6bf8aae1ab87d4af1aedbb21843ddc04eca60da9d1a88ae85071f858c00861cfbde03bce93cef44044661b0397b4f940253c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x6b8, 0x1, [@m_bpf={0x130, 0x1d, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8}]}, {0xee, 0x6, "47bdd547dec896d81edf16b92db5be19f90b35df040aad67fe6b4eb1e279881af801068eee9249ceaf4daae6e1ac0476065b3149ad08f5b93e92d6bed0195d920a0c172d8d00ac8921f04df7231a6439bdea6658d2de8e5d2a04ddd1015fdd85d21518708e40507fc52032a06b62fa83c83333af215ae2727507bd4de845876bf7a2cd5cd1d20da0ad30a22eada2d6b1eefd46754f625201ffc8a5d14631e1a0cceca60acdabfe8601d3460c21c9ceae3bca53d65a07cb3b7705559d6151f8620c9cee0a3249de06ade3fbc70ec55c542a62d73b0cbc5611a53b7fa53331fac0e2153dbff3345c036ff2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0xa4, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0x7b, 0x6, "0d80cccfb94b7fdaefc8b61bd38f761df8ef17711eabbba81b022db5ae0e912b33af141cf97443f4389af02eb24221dfb673642c85ef3ccd4cd82e68084194a825d764b1e718cce1f5eccb798edf51089a5209489d030e3f7e44423905f5221331ac8e9b572eb69d2ff31e1ca5d135e966490e854ab5ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xcc, 0x1f, 0x0, 0x0, {{0xf}, {0x98, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x4, 0x7, 0xfff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xa3}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x10001, 0x3f388925e485eeb2, 0x6, 0x10000}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x4, 0xffffffffffffffff, 0x6, 0x3}, 0x2}}]}, {0x5, 0x6, "11"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xec, 0x1b, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe9, 0x7348, 0x1, 0xffffffde, 0x1f}, 0x4c}}]}, {0xa2, 0x6, "32c0ae5a6b7069719731268f7c5b42b00c9d2942b9fa17df344f2d76661ee05f432a4a70038690b2f1ca2799c76e1dc4d72bc51eacbdc3dffab4a0a806de3351677ac4d0a0b8639bc012c03fb0dffffca688ec40b9904230fbff4f951e7cfcb668e10075cdcb86fbea9097df1ac2b3f52b66ddd0d72a6f68376a4b3675099bd718965a9e8ee6ed575278553925f49e154c9f0826569a94ed3476fd2298e3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x328, 0xd, 0x0, 0x0, {{0x8}, {0x2f4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xad, 0x6, {0x2, 'nat\x00', 0x5, 0x1, "e9dea75f531b1a29f40e5505a8093c2f75332bc751c33d923b38cffaac5249575efc2119eea610d35d5fbc4f66809054d6b3801d7bdb4ac99668edf6eecc58afb160c81d5e6fae895227aaa0f4fa4d47344314429712783cbe35e0adf02d4d0d9aeff5596706e07162d1a5df73bf325402ac7cc82323df938fcb54dba03926f696e4bb"}}, @TCA_IPT_TARG={0xb6, 0x6, {0xbd, 'security\x00', 0x35, 0xfffa, "9ac07018023f11c2ee9f739abb941dfb9afbd4099ec69ac6289c3390f4b8ae52eb848bce85766c4050bc77105ad49b98cf771a9cc95a6f089e02a848744841c57fe1a130ad2a80e5c03259c22eeb1b1336e6bf6e99d0f1f22231fd9e654275aa77d91f6c9fab98f40f4e194da15689d19cde9d42c8e3c1d0552df13fcaff2b2c9de6fa87c169af9808bf4dd8"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'raw\x00', 0x9, 0x2, "de40d48c1bd52e69b3f8d571ead06cc97edb3d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x6e, 0x6, {0x5, 'mangle\x00', 0x7e, 0xfff8, "9c687e1e5a343ed6ca34e8111a9d57978d02e8f7e60dce8cddd4193a80a72efd653dd4693957845012b6dfb9c8cdd2c5013558ee9c535f6fc9b186d976089b30377ca5ee"}}, @TCA_IPT_TARG={0x78, 0x6, {0x9dc, 'raw\x00', 0x78, 0x0, "2360b59e73da26119da9510a671775b75bcace30dbc545b9a11dd317c112252b1816d012eb044a9b00126e0ca016a9ba8df3d4a9cb7d00b670f44a91cd76a126c1312d910dbbc490c9b0bca7f67f"}}]}, {0xe, 0x6, "4d879380d1d8e9ab120b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x3e0, 0x1, [@m_nat={0x128, 0x7, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8d0, 0xfe1c6d98f4e62df1, 0x7, 0x1}, @empty, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x2bdf, 0x2, 0xada6, 0x1}, @multicast1, @multicast2, 0xffffffff, 0x1}}]}, {0xad, 0x6, "1820f0550ceb91d5aab90a976684121ddf150212ab7764394579951791cbff1f5b4e3f87080828122b5e5befc6adbe67c0d20dc2534978d96356ce6489c4f9c0dfb5752672dd5bd84ec74ba7c4cb9957361f8ce0f4830c56f97705032f7d6716d02e8b9114eb3c7f3f286a79a1da4e8043726be169d177647e107d2b044c671e846d53ee6ba9da9e343d981eae12d525cb27b46ff83fd2407b0e394f4a094aa37388529042205d8f75"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0xe72731d692e0a290}}}}, @m_ctinfo={0xe0, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1ab}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1f}]}, {0x79, 0x6, "29dc4f33ce0231771353d9dddf5f7554e2d12da593b3f606681ccc64dd216292d38c5954038128a017565ed40a2932a230299466bf1de75d3214e5f02463354f56627cde40708762b2e648aa794a0eb5c630337c6b52787b6c2ca2186edd8ba29fde08ed7c00601decc3754981462fbf48deae07c9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xdc, 0x2, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x14, 0x3, '/proc/key-users\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x40, 0x1, 0x5, 0xce4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2d, 0x2, 0x1, 0x0, 0x8000}}, @TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x42, 0x6, "6781c5254ca782f9f179c571b735f9d1506ed48a963b34aa2f6d854a4e154f39f037673083dee709caa440270fcddc5fcefe476836084d8820d181f90dee"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xf8, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x6, 0x2, 0x400}, 0xa8a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x22, 0xf7, 0x6, 0x4}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe7f, 0x10001, 0x8, 0x8, 0x1f}, 0x93}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1d, 0x800, 0xffffffffffffffff, 0x6, 0xce}, 0x8001}}]}, {0x58, 0x6, "0ddfe347277c803d5ce419ab7ec6b09f10858f9c4eaecc9f39e317a14a35d51d2f534e91df32ce14c75760e229b4252304bc62f07ec405780b5f6b6e37cba921970322d563f03fa2711f85077159788355b27190"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x15b8, 0x1, [@m_connmark={0x1b8, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x2, 0x0, 0xc8d}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x80000001, 0x7, 0x1, 0x100}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x713c4616, 0x4, 0x18}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ddd, 0x3, 0x6, 0x4, 0x9}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd6, 0x4, 0x0, 0x5}, 0x6}}]}, {0xfb, 0x6, "ff537cf31e7850391e450dd6483acc334e48abccce0320506bf74d76322be7bc50ca585ce2b868e3d7bb0043aae758e049acc5c112f5dd5c1ab8621567904bd9bbb36ce2532ec448f7c2da3a7d215b90c6f0352d0aec39d0b82fff61f77fc27037c7d20a09bb79b51eb46688f805690861c2153a91ec51d7b610d9302f7abb46a5feb3826f7b23c72bf63ffd79d6ef85aefe734b258f3298443632a848407da2b949e36a43945d29c2e82de5b553a2b354d23f514cdaf787f727a0ca8f40a4a9db6de57f22ed3a8d34c7724cc646d33b1751bdd054e27998af5dc929d34ff6000ee857dd68b4dd28b25c45b1f61870c67b78deb511c311"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x104, 0x9, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8000, 0x0, 0x1f, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xc31, 0x3, 0x3, 0x101}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x5, 0xff, 0xffff8000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x2, 0x2, 0x4, 0xfffffff2}, 0x4}}]}, {0x57, 0x6, "14f928c8c177bd713aa2d010b4f23485a40d613d27fdca4fed1093b71ddb4886836dd81a1b7112b9ed96133f2a4535110d49eaab5569ef8fd6a33c7d1558d763cdb9f30daaada0be18bfb0f203fd2774e63715"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x1030, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0xa16517732cabef9, 0x1}}, {0xc, 0x8, {0x2, 0xee94ec385f4a51eb}}}}, @m_csum={0x130, 0xc, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x4}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x90, 0xfffffff9, 0x3, 0x3, 0x80000000}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xff, 0x8, 0x6, 0x4}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7fffffff, 0x10000000, 0x7fffffff, 0x5}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x401, 0x20000000, 0x9, 0x4}, 0x20000031}}]}, {0x75, 0x6, "ac65cc2ab7af27ad690f6dd6b708f3d66b23c1e3249a86f4a2d6ff8e6014ea925ecaa8dce929e53a07ea4bf7aee69f2fd30663147c488840360d5a8a8cea62d4f7edd407deac48fe00ec0918d00e2102ccba841d55e01489189eab2169e322e257566cece6c8b35ea3cab88af9e571238e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x198, 0x11, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3f, 0xfffffffe, 0x3, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x8, 0xeb7, 0xffffffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf7d, 0x0, 0x3, 0x1, 0x7}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x9, 0x5, 0x6, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x7, 0x4, 0xb73}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x184, 0xc2, 0x1, 0x8001, 0x2}, 0xfc00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x1, 0x4, 0x6, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xd7e6, 0x1, 0x3}, 0x7}}]}, {0x85, 0x6, "54e70b92d3c187026dbacd4537de8901e40e0c06f1165346d7a0300c6e50fc7ffcba7f461c1947f25eb6ab507f4a8b3ed893b5f12047fddd07cfa6f549992008f0e1b67b8d7c420efc8cce9a4b5cff43788a1dafd41141da5174d8fea2195f9c102168185ac3983fe583e71e0667b5a9ce1c111d9164dcb6c935038affc6a18d5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x23c, 0x1, [@m_ctinfo={0x108, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x600}]}, {0xcc, 0x6, "187efc9f14fa203b7e480d43c6a8f97812865610921f46f7a4e8c4e51e82da7de7aaafd51c46d20287bd7a928fe6b97e6d24bb253280f18f7e007bfc49cb346d264d6576ca62e93fae6eca21197010f06882e655319bb2e9fc0bbd97d00da3a079da296e8a8a005b91ad51a9577ea21b9e0ebaa85eca657b97e0afb00e2478587d053ac379afac9f5e2f1c018ae1ae4ad925e7de9b1d74f3330b3e979b0f82bb6c7021a10ec1c9a55c7c8f23e2004d5da4818960e12ec9885ce1e62a77750abaaf273597e0ceee9b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x130, 0x1c, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x0, 0x7ff, 0x101}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4166, 0x5, 0x40, 0x7ff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x10000000, 0x7, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xe936c5a, 0x4, 0x3, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x1, 0x1, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x7, 0x2, 0x1, 0x6}, 0x2}}]}, {0x43, 0x6, "22a6898bf962f7dc8916becefd18c73ed8cda5a81e7910225dfe044badc1779a6826d8a362579d13534b63aa507249d30056491f62b17e8607ce712801b1ae"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xd47c}, 0x1, 0x0, 0x0, 0x20000054}, 0xbd3675495b6a6664) 08:29:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:34 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:34 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:34 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:35 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1369.755803][T31539] binder: 31521:31539 unknown command 0 [ 1369.761772][T31539] binder: 31521:31539 ioctl c0306201 200001c0 returned -22 08:29:35 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:35 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:35 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:35 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:35 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x800, 0x6, 0x31324d4e, 0x7, 0xb, [{0x8f, 0xfffffff8}, {0x800, 0x1}, {0x1, 0x7}, {0x81, 0x8}, {0xb1, 0x401}, {0xdf}, {0x0, 0x1}, {0xc, 0x101}], 0x2, 0x0, 0x3, 0x1, 0x2}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:36 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1370.164562][T23822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.174913][T23822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.185068][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1370.198020][T31553] binder: 31552:31553 unknown command 0 [ 1370.203706][T31553] binder: 31552:31553 ioctl c0306201 200001c0 returned -22 08:29:36 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:36 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:37 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634040, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:37 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:37 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:37 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000100)) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1371.641309][T31587] binder: 31582:31587 unknown command 0 [ 1371.647044][T31587] binder: 31582:31587 ioctl c0306201 200001c0 returned -22 08:29:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1371.844070][T23822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.852261][T23822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.861362][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffff, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:38 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1372.587960][T31614] binder: 31599:31614 unknown command 0 [ 1372.593610][T31614] binder: 31599:31614 ioctl c0306201 200001c0 returned -22 08:29:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:38 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:38 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:38 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:38 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/drm_dp_aux_dev', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3}, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1373.210511][T31627] binder: 31623:31627 unknown command 0 [ 1373.216499][T31627] binder: 31623:31627 ioctl c0306201 200001c0 returned -22 [ 1373.326980][T24216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.334956][T24216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.343456][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1373.467195][T31627] binder: 31623:31627 unknown command 0 [ 1373.472894][T31627] binder: 31623:31627 ioctl c0306201 200001c0 returned -22 08:29:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:39 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:43 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1634040, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1377.307312][T31647] binder: 31644:31647 unknown command 0 [ 1377.313138][T31647] binder: 31644:31647 ioctl c0306201 200001c0 returned -22 08:29:43 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1377.685541][T31651] binder: 31650:31651 unknown command 0 [ 1377.691148][T31651] binder: 31650:31651 ioctl c0306201 200001c0 returned -22 08:29:44 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2630440, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:44 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:44 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000003000/0x3000)=nil) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x44000) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2000, @fd=r2, 0x1000, 0x2}, 0x9) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x0, 0x2, 0x3}) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000480)={0x5, @win={{0xa9a, 0x3ff, 0x2f, 0x6}, 0x3, 0x1, &(0x7f0000000000)={{0xea, 0x1000, 0x0, 0xfffffff8}}, 0x1, &(0x7f0000002080)="bd93e960a81cf7bff798fd73a79b1d9460aa23593b46d90af55816e3d0cf27e630f3324ebc08af39d5336a2d0181edc5fd34db4eb6a5859e55030d80429bbfd2e98ffc30d54fd53736d276a41080d74301840009eeecf48bbad313e5d347527ffd3deb13a2ce2d7c75464ddd89ccf2b3550e8ef0f25a80311cc9fdaa3a4f9ec70eb8f73ba31826b47ac14548ab7262ca860a252af88452da5451524d6234117d0b740245cf492ab59428b971295685a00e40066d5d0ef40253966b47d31c0da90bdb5e4e258546390156a2e260e6d144e64f1daafd0bb977e08e152ca13d12c3997e1be8c117be93af4b9e51dc0830459f49d27a7ed2d898152a99f1d4f7a93f4bdec88d4d6f7fd52ff722e71a8a0b0bcccf59f57230792a7dac9ec8e80c3700bb1276de2b7f93993bf017e13174516f85992c2eec1dd8ac3debdefe4f8f5dd5473b37ab03b5664eb835467880efd5f1ea4cf1b19768399ad9e15e168ed8cfe5187a6605b557b4492f92d517b445d0c2bac58e61cbcd07a6b316ad73863adbb2093b39365a41bf3b024fbf1db1e2c8f9918a327d43c7fdb9e170d79c1de511c1581aad4fdca72b472e7bc4aeeb9e50b002464bda6ae64e41b6bda06f06cedd9ec98b45b547d15c42abbe2f0e6a470fbcc5c78b3b9c915ac2ab5f4dda42e79e45e07127ae147b4caf0bbe75c923a77c1dc2cdb1309475c4b7d7c95bc8cacc9d94d959635815c21c5d44d6db38d8f51695f6948faf5172b1111c07a8af1821421b8979a237130357fec59f3a275631d33d0e8d26252e3e13a761fba329294601b03d205d5dac70e1c320644c9df2826628f08b553840c4276383942d876837899385d4ad99cd8e273033d65405b2ac6c308f3cd4a24c8f61a9a14576a6e6dc2b00b6ec134b6a7b07dcda1d44aff47400d9e7e489efdce0e0143f10cf02b871b4b1888dbb07cc18ff348b5714e71df528134559249b3bd033e51a426198f53d1e4eeded59eea99763c488049b293bf88233ad587c3710c703780ba968695d080f1e74bd032e53c245d584f1a7f94da4b22450069c20326656a0015d0cd8fd35248892c513817abf2a59e0903b841e4f6cacd5e0c6c1670ac46ff4af1eaf54e69f217154e3b43597abb268bfea0995ea66296ba7239f43cc7b388cdacbdc6468f46cbc2a75e83cecd2c3f3ff4d7f315a8ba1f90f9adb2f8409f7eeb95520949cc1b206b918a3a8bf99565ba57c481173425563deca1fca47b9a5dcd19f3d12e9ad2742051a0021df289d9ab926a81a374bb199e31b0068422745c7b91c933e524947141e908da5432e984a86884ff18e639ffe7a3f537006b3d815e96ea3c0ecda408eab5ed9f2f01a6278f05915dec600d8137c4f25bbb13e16da3577216317ab8b6ee68ed779cf0306c7cbc61a4b2502a0a8a73a46f6517c26455c8dc5de5f650a3ffd5579c75ead851cc60bf7774ee527cedea07d67c900e11780ff4153fbee36371a950e92c44d702d23be89f664a264e9fc8f7f46905a5611b69a2cf0332f469b9355371b8f7c86f602a4ef83e186b73a6d5a0a5d01a4a98d4fc7174ccfee65fa5d68b09d4be24dcec9f12e16aa31b8469668691559d1b65d0455946a548fcbcf0515dd2322457e4417f9f56ee526bbb5692b493e358789983de34fee1ce789d1f640c7704a0547a914560e16a47a3ad26a57d051cca6b22c780df1867a22e873ab140ce19836e6ae6aef204f2c1d697d634eab68539abca7ee963ff109c6b7c527c7b9a0c38d18331fe56c9564f0936ff8d66bb759e4431796cd7f8b00d78b2e64ae075ff585077e5944aabb0772ab646398914afa43c8c77d5e0135959cd31428cd4914cb8d89e5b2a93b3ad52f9b8eb452a5d5963c5919968c1c9206821722ec2be3428b65df47b9afe7d0a358804c38b3889e712f7ee403daa124a869187d4deed5c9875a8439c8d3e567b87cc445c01ed0ba62bbd6fdec784614b6cca30d294b9d01c10b3975470deb7ed07dfb73f2a558aa9f5ad2590ff35d5d6352e2e62b52673610f87b89e5bd15aa79bee1996cd2704b7a41f401fe35eaaad85681f3ea0dff90eb220257a8c01f65c9d085c73dcbdf539b3d12b74ea7010afc545f6f98636f8a91f03476ce96b1763dbb609ae02730fcc80855d150b223bedfab05b200857baee5f22fca9fe6be0def9fd6056db71e0d12cd9af1edfd049795470057c23d8a81655cbcb920933dc7356eb04f644d89fa52e168be5dd40d53e6609d821d8bcb75d99c0424e0b0d84294a72bbe5c332234beb2aa3bd57e8e4636ae987da2b17ae64cf64c44effa52f00acf38f71dca569eca687104390a27e155efb4dedacfb19407d2e8f9bb766faab61ab5a09da9912d5c171df00f74fe1fae17198ec82ac0e8272651d5fdff773fe31a8d504135af68dab985ca50fd09e498deb83e021c6fbc2dc70fbdf32d4b95dc909d175c54235961a18006ad3d2a74f5959f8add1aee019919812ab14316e730b809c99ae1a1a4121a8972591e84ce5ec78c57dba7987b010fb16a285ec8c839197e6f09d1d74755981fa8d8916c3930d713821a7a99b644f97c04e00d4c30b4ffc564a56da5de1b2103aa4f5f84478eec33d7171dee4c886b1587a3c96972447ad095588842255a1db39bf1603cd9191fd58f6d649317b9c6300480803995b8e212fc1633fc752a15becaa3f130e78cdee461c466df212c534e24ae7545fc10f07d683080a447d160ec7f86d808752cce3da2cc80eb1c923c5fd69ff745a1782e64514150c93217a50a54af9f241fa9fc97da3f16ff37c35ff34e9e3664c2615c23795cd3d7d27704c5fc36394102627f9dc662f956e4649b17c81498bcfbf1f008922f36c58e5b6c72911e0ea17939139e341b0217b29c8ea46f2f6ec8fd8c3f60f9294cf312bcf611b09f1309a11fba0c697d0961c26a57efc769f8f6360ab59e504df9ce34f456b1caace2174984146f5dc714f836cf4f98d24001d6c102ef8713ff481ab654de3d6539c788481d492cd01bd43728178ae75381b06d2b79f02543478c72a5e554b81d018417cfddb939d53aa1b461d1e6cede5de0b865553c2e48ae4d6032039412abf8bcc82c5dad739bf3fcf57ee4d585cc305f1a9c1d578c9ad6eeb5aace3d7835552d3d7b5011ac0603bc37152964e9f94f028f2eefe1f4b4a596b5c9a035632d59c617b9b1153bfe480d67dfa460fe8172a6e4f81d18203a70f327b3fc818b273c12b86a120a7fd0bcf01eecb4ad417090954e8594c764df6acb6bf16c2259f56c395360db447e6316990821daccb304ddeba9e531bcd268bda062c363ea5e9d05946ceccba93f7c6b3cfb684e7581620dc2c948018edd093e69b90b5159c1f1f0c4d035898f4662bb98c31cc5054865c4028fc1629bb836a1f21c8cc03632c0e5edea9d038c7240bde043b69e6158992b4db5cbcfa21edf43e07fcf83d5901e3de2274752881445669c99e99d181bb675622e0da62e43cc233622509b9870772c6c3834bcf3e7fafe69066f70ff41f8b58fc3f65e630dc239ff31612ae72e8deb7fe91b0dd343b81b85b8e21dee5912a29fc228aa2f7d6c7eed55394090df84597a1c11c65abaecbb5b10baef5c572b1e81b43099765cc12185233691be01f10fb4b5f7812ca1a4f66a022e505f71f72bd1fbb4bdffbeda36ed6b80259fc8ea3e1eed0b65cf8334621484c75f7ab27236c18f5ddcd33c6fb230ca57d4c1069f70ae3c035ca0c3f90b551b5699f5c8f15fb8c25c74e98870aeafaa7f12d6b5e879cda3ae7c6f04363f03b486e4b0fe9bb8dc24f453a2dcbf3a8c14370d4f2c047b43963ae03effe5f43b174f1f1ba8d11f14a32936da9c138e8052edc7db7e557dfdab4c56d2fe5ea05a5e39da83ecf1279a98b124e2362f86700febc3281c427ccd5ea0b097384763ed600348f8c58c6da4e53f583b1bf1057cb7bb762f9952cf6bcb20d61eca7169746b390ec55d0fe47317396953f490da7005dff76791ad595bfd0442457c5f7d589b4d9a7bb851f39ee3a4d975e1473bac34a264b48dcabe438badc9f9fd06e89ecc10e024213a9022170a238509f3288ac78148eaa1ee84ee2ba1685ca4f860d01c7e0416319735bf33d0cac1802dc476468778f2eb352bb3199da1f24d9e09b7d0854cc5db92d322b2d56b4ed7c2d6a2c61871424d032f24c8ef9e931e48fb35f462ac8eb23ac7458c98c8be473d4ead4768a8e10c9895ef492db87c3c58ab519c18f3104042580cbf0de80f08a051bce71f700c43d1df12389c3d9622f40fc927ae4d1cc1489032992e42ce777b27e3bde3d9d916036e94eb38c86c81828e9f6554d492e50fb4fe78724e19eaeda78bc407d17f3c8a7c1ca7d32c504ef2fae0df76df3960473c1c525b684f07b55eafbac534c908a3d0ddbaf0781c2efdcdf38e5191bec72f6a806b35dc47657cf33dd70ca1c0a87ab4ac33de65de72c54f3944b6dda016c070391fc518c51dc67e8406ae3c0508404cebb6b5fd6c657697c7a597e7eaea16062767d79d5fcd848c7537f62414b019b1c12d18a4ee833ad65b69259223b584c5be82a5c2da03d178c68cc924b32d23e90349e8398bb753926a03e05e71d26c51574cbe1641edeb0756d1aeefa9f8b90ffcbb3b7ced4548a30543cbd06ea8fbad03068b3e1a565c81240034fe79213d8b276c796c41b36bb73e33ddff81aa361812be211264800f02e18d2d3052e7630c5f4acf444d788a4806c49e8abd71642415ceccb6637fd46309cca39efb7bdc159bbc02f3a0976ba3bfb203befa557547b61c132c930d347984af04812b10969b35a14253a6b8cff05e77e6d2fed08ceecce59c32596e4d3554183c1e6f4d6f1c6d3e610a94249a1e19d1a129f557fcdf30908f2bdfb4a122cb6a0a4c74b5a85a91d431d19b66b6225886171a454e403bc9cc509daee2abc49eddb21034123a73f160ea0167d363a1954490df554a63e21dd414a9b9b97ccad9f27cd349a6fe1f6bf5eeb164e0f6a2d7db1d74ca3cccdcc2d2278a54af1ceb691eb40e1e72d71f75f3a51f5d6252927587acc2b0b3e88317c03537b47f0218ffa7dbbe0b194026613f779e4fbc2b619ef9803e70944070cb6c32de4dedc947302634abce8f50765db20c62d9588f9d8ab719bf60430c0faec9ffd16a1cbf4f61a28bdcd5fec40a32eee480ad159cd3dfd98496673ac49414a8ef5b3d94605ab46649660e884da9959f12ed804c682d15cbf7757eb7898c6ec8a6b1124a8349d9df056b329827d99a2108ab59dc8195b01dfbc813a41f29c6c7b178361759f3fa6527d8c3c003ed6fa7312f107331e40854ba5226f4827392b678b01e2d51e7a8448196e896964e98d2d1810f3051447071d967bd60ac258743934e7ee86c6cd9ce003224e4ee8d09da76160d8e8678558fb0d8c3a23796a11ab67f222edb181e3eab5ff0d39cebccfff9c1ef08116d1cdf064d91786b97732056b98b3ac482334de929362aa43c2c07e920249690cf8bfcf6a353ca3c547de9f026b936d9b39ebeb593e09ecf337b28354085d5d4fe823ea10c870c16d6c954014900bd187d610d09d67eca4624dfe3ed3dd4c8dd661f53f107d773ad62786256756c54af72fab86af3f15bcc244971bc46497dee42fcdc9e00c1a7dfdef6ae4d9cb98d550645b59e27d8a93f55ca081b57310507b86be13725a850aecfd30bda8a9d5da986fd44732aa09610f0b1f4c00dd4b84c6bb84a6e76ede476c6de28feb035b1521dae7abd4e1c65bb3df9b9142eb434", 0x6}}) [ 1378.651096][T31667] binder: 31663:31667 unknown command 0 [ 1378.657002][T31667] binder: 31663:31667 ioctl c0306201 200001c0 returned -22 08:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:45 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1380.185406][T31690] binder: 31688:31690 unknown command 0 [ 1380.191219][T31690] binder: 31688:31690 ioctl c0306201 200001c0 returned -22 08:29:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3630840, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1380.680397][T31697] binder: 31696:31697 unknown command 0 [ 1380.686347][T31697] binder: 31696:31697 ioctl c0306201 200001c0 returned -22 08:29:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:47 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) syz_io_uring_setup(0x2b3a, &(0x7f0000000180)={0x0, 0x5a24, 0x10, 0x3, 0x288, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x3}, 0x9) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:47 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1381.642082][T31711] binder: 31709:31711 unknown command 0 [ 1381.647911][T31711] binder: 31709:31711 ioctl c0306201 200001c0 returned -22 [ 1381.849001][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.857267][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.865460][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4630440, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1382.152842][T31723] binder: 31722:31723 unknown command 0 [ 1382.158620][T31723] binder: 31722:31723 ioctl c0306201 200001c0 returned -22 08:29:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) [ 1383.504874][T31733] binder: 31728:31733 unknown command 0 [ 1383.510475][T31733] binder: 31728:31733 ioctl c0306201 200001c0 returned -22 08:29:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:50 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:50 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="819e8f2e6bf7fcfd18ea7640ecf23c5a332d4ad8e6dc43bbef8f3447abe73b92e7c7ba3175d374", 0x27}, {&(0x7f0000000480)="5dda335a85a59260c58ee6994023d5ab0d172ec2ef0a131dce29e6f789e026d78c93982fb01b9214042e58d5466962da4a7c259cfb515be0725ece9f0e7636201e018a8cbbf5bc8533221675ce119bb0351a4257369f5600642acfb0d16305411b3b5b957fa5a9558b", 0x69}, {&(0x7f0000000340)="ff6bfaba20cd88e87ef203bf88f0429d53038a399ad5971c93a5257ca79cb609f13f926f5d58febd49c3451b900c0f9a89ff4a", 0x33}, {&(0x7f0000000500)="c99a3c4800b05bc8aa281558d18798920ff2129bf83793b06baac7564a71f3e5c3c08569d81857990b3eab816f24ef4bb2982cb1dd75feebb10e4eb0c27b92453e189b6f1e94709bf4919be470b745e2f1a1c75e2ea197234f4392d636d983f5c6517db3af76300f2b00a06751b17eeb6159e6e2a61362cd5833009109f26168fb03555e21c14cfc2139ca37a459a0ac648c23de4840c27c98be94985e60b9beb41d2f676c7bac8aad49325cfb7bb8468b6c87430ec765eb3684dd052c73", 0xbe}, {&(0x7f0000000780)="e86140f7abb8e39b76c24c8fed1ca50549c5baf06783db336a4d8948cb37d5c915ef08f79856de3f86cdbbe88c505e2a12e8eb6934c3e27a8dfa1c41d2526ca30a4b819560cf6f52ab23d961581a238fd8f7f0405fdf8a8c7c67b7daeafea5f8f8722886e9bd68f95bf84da25e9eb30cec99d78027d6b7b5e9313acfa7fbe9bafad0d7419c5f680f9fb25a4954c7e70e4534384413ed9347e0032caa11a5bc61ee0a5d0c7ab5fd702eab0614d86c774b173694dc65410c86b00d10d5b35b480dfc641838c4ac4d6fd38ec27cf551e9c3342ad7fcb1efb7f41d37e3221b9a8c9ea0e656", 0xe3}], 0x5, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}], 0x1, 0x20002c00) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = signalfd(r3, &(0x7f0000000100)={[0xffffffff]}, 0x8) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000180)=0x9) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x43, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1384.441897][T31754] binder: 31751:31754 unknown command 0 [ 1384.447697][T31754] binder: 31751:31754 ioctl c0306201 200001c0 returned -22 08:29:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1385.159958][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.168190][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.176195][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:51 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) [ 1385.578137][T31773] binder: 31765:31773 unknown command 0 [ 1385.583783][T31773] binder: 31765:31773 ioctl c0306201 200001c0 returned -22 08:29:51 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:52 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7630440, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1386.639516][T31789] binder: 31786:31789 unknown command 0 [ 1386.645208][T31789] binder: 31786:31789 ioctl c0306201 200001c0 returned -22 [ 1386.666122][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.673971][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.685438][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:52 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x2, &(0x7f0000000180)={r4, r5+10000000}, 0x1, 0x1}, 0xbd7) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:52 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:52 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8631040, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1387.006195][T31800] binder: 31797:31800 unknown command 0 [ 1387.011881][T31800] binder: 31797:31800 ioctl c0306201 200001c0 returned -22 08:29:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 08:29:53 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9631040, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 08:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) [ 1387.605528][T31814] binder: 31806:31814 unknown command 0 [ 1387.611161][T31814] binder: 31806:31814 ioctl c0306201 200001c0 returned -22 08:29:54 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1389.164912][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.172805][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.180694][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:55 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x48}, 0x0) 08:29:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:55 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xcced3be520ddb0b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1389.314532][T31837] binder: 31833:31837 unknown command 0 [ 1389.320545][T31837] binder: 31833:31837 ioctl c0306201 200001c0 returned -22 08:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x48}, 0x0) 08:29:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa630840, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1390.162856][T31851] binder: 31850:31851 unknown command 0 [ 1390.168681][T31851] binder: 31850:31851 ioctl c0306201 200001c0 returned -22 08:29:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb630000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1390.562004][T31861] binder: 31859:31861 unknown command 0 [ 1390.567762][T31861] binder: 31859:31861 ioctl c0306201 200001c0 returned -22 08:29:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x48}, 0x0) 08:29:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc630000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:57 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:57 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.log\x00', 0x880, 0x18) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x0, 0x1, 0x1, 0x0, 0x7, 0x80000, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc688, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x14000, 0xfffffffffffffffa, 0x21, 0x4, 0xffffffffffffffb1, 0x6, 0x9, 0x0, 0x5, 0x0, 0x2440000000000000}, 0xffffffffffffffff, 0x5, r3, 0x1) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) recvmmsg(r3, &(0x7f0000001540)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000780)=""/163, 0xa3}, {&(0x7f0000000580)=""/38, 0x26}], 0x3, &(0x7f0000000840)=""/16, 0x10}, 0x35ef}, {{&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/201, 0xc9}, {&(0x7f0000000a00)=""/185, 0xb9}, {&(0x7f0000000ac0)=""/235, 0xeb}, {&(0x7f0000000bc0)=""/90, 0x5a}, {&(0x7f0000000c40)=""/184, 0xb8}, {&(0x7f0000000d00)=""/1, 0x1}, {&(0x7f0000000d40)=""/81, 0x51}, {&(0x7f0000000dc0)=""/238, 0xee}, {&(0x7f0000000ec0)=""/141, 0x8d}], 0x9, &(0x7f0000001040)=""/33, 0x21}}, {{&(0x7f0000001080)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001100)=""/121, 0x79}, {&(0x7f0000001180)=""/217, 0xd9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001400)=""/187, 0xbb}], 0x4, &(0x7f00000014c0)=""/79, 0x4f}, 0x101}], 0x3, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f0000001600)={0x1, 0x80, 0x7, 0x0, 0x3f, 0x1, 0x0, 0x1, 0x9ba1947d9817e771, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4abc29bb32efb15f, @perf_config_ext={0xedb, 0x4}, 0x400, 0xfd27, 0xf7, 0x2, 0x5, 0x7, 0x0, 0x0, 0x2478, 0x0, 0xe7}, 0x0, 0x0, r3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:29:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:29:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x48}, 0x0) 08:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x48}, 0x0) [ 1392.225345][T31877] binder: 31871:31877 unknown command 0 [ 1392.231057][T31877] binder: 31871:31877 ioctl c0306201 200001c0 returned -22 [ 1392.490121][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.498498][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.507110][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:29:58 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd630000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:29:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:58 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x48}, 0x0) [ 1392.904318][T31899] binder: 31897:31899 unknown command 0 [ 1392.909967][T31899] binder: 31897:31899 ioctl c0306201 200001c0 returned -22 08:29:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:29:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:29:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe630c40, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1393.770100][T31913] binder: 31912:31913 unknown command 0 [ 1393.776182][T31913] binder: 31912:31913 ioctl c0306201 200001c0 returned -22 08:29:59 executing program 2: syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x200, 0x0, &(0x7f0000000cc0)="86e5873b7b68c7f31adadb82a7edbe0a943d64fb0d3146ed351682d5d231a31cbda67d63cc8552875670235d1dd5bddeee03b2c47c870e686221e7f6ce70b51d3eee45d364bb10686b429efbe2f7dc71bf7710a5b86a4b9f18d54e6eb7158cfcac4d421f5caf30f792dc65908c1d1385a161fbef9898e5a87aa37a97acfff11b1103626b9f7a2a78c101c10a4638d51b06a7ed1f1f8cddd35d7c4aa8bd9234dc", 0x80, 0x0, 0x1}, 0xf04) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000480)="2ded957f64bd736f5d3323b4275f35c0cd8369a74b7a68eef1ac8a312bd79233d7477a6078ce0cf684598a675e65cd64e174d9d89ba092df672e7d47c50e43f7f6bb9783d326274b31a3bfde21bb7f6d89b8d0af980c67d5386136c5f77b6ce05136ee83b682588df5740c5e24aaa906c4f1d743f9f7de44ead4ba6886df02dc0a28893c9ca30522ee8cf1b979c1a00865c810a90b72ddda6723a357c581a2fdc8db1ddef0667a0c8a3dec2a30107966b07b9aab89f20469313d1c59530bfe2d430fe300d8c96079837f4c", 0xcb}, {&(0x7f0000000780)="64e7579714bbcb9ed1e6cb78d0333eda9a7df5d49b23e44236526900371ec974919020db3763e57a3103401a38783c4c68e8dd7e9cc7200a33b83ef8c6f2e5e5fa56701656bb973c862976598dc07c81fc6915a1a167f23e8a3204f510496c1829d05b9ea3c01ec29ca6a190ad95151a868f78f2919688cc64ebefdf35741c96df356590c923a93232d46678c5034988680083197a9dac153b3acaf2118b5bdc04e3e114d667ae541629b54d641fd63eb9eba9144262f8955381f0f359", 0xbd}, {&(0x7f0000000840)="cdea6a21897e4d7ccee63d2deb4b4982834ad4ea1bbf32473755435d14b7fa5648b6903330484a9ec6f9dad3fba0e03a212bb2c6c2daf0c75dee72b3515e4ee721dee500d41a7ed5a23e6e21896ef86d104ac6ca0e3abb7d4f92550ca7b0c7b3dd7a0c77d504754a6174a89e547533fa97b20c0ace288c828bd21560f38f980be97a4c69c83d32174f9b3c983befa56c96bcea7df1665cab660a5c465b0ebdcc9241c7c98beac66daa24f1f25c18c48a424a9dd75e0e113675171cf032f428d225759942746f993c", 0xc8}, {&(0x7f0000000940)="5f4f63a4b3610c22fa0f2de01ca18f08892ded627e493684edc1c51814032ce755233c63ed0fdc2a5b754e35ba4a9a823fb4c285a4a39a5f83edde038a75bab06e3a1fc433bfc3a602a55da475c80089fd0b0d06c9ef0d02a499b3cc9a1c6fb679230b32663799ec7fb7e6caa22cbc6ee6311f4a8940e61d8a0abcd1cf0c48c32c1cd73d51c32b076f3d71be84f790cb5fdb032f99757612d67419ad9957b7b6f8646d326ab0a5552955c56aef57ebb194c98586ac61472da6b6571b91ebbd1032ba479b96392d893069a1069290d21b88ddabad0a53ed54ff38bd042d9231822c7a99e85749871563ed6f2cfdbf14252911268d551b6226d53b4488423ab6", 0xff}, {&(0x7f0000000180)="6f4191ba03f33609947accf42f48c65134499f09d22379b6a66a674618e99549a96f5ee85ed72554b403a2470722f79f90558cbe6b7bcd1c9310d261ec2b2fd4cadc0b331b8df11a75ab6776659ae5e357b6a468245370254e8fd64a2e794f0054966eca73277d4145", 0x69}, {&(0x7f0000000a40)="e761c8057ee8374a18adc2e6653ae0cce10ad305075e0475eafb60ed02512550fd3b1de20ca00b3c2e4d91ed8aee8d6a35beb6aa2585b3e349602d96a761e5ee9b15cab05ec37a2041d986729f6431e931bfac34a9bfa8d8140ef080a71f79805d716290082ebc751f2e5e4be876a9d0fef4a5f7d618bd541ab7623af43a54bfe73e29dd424cc5d155feeb6762ba8e7268b2799e44202408276cf5fec8c614154f1625e4017a2a0b066dbc733cacc96831c784b5f7a1df5bf44f15e01252d071a25f44a30676019faf2762101b21aec638f97e0f63", 0xd5}, {&(0x7f0000000b40)="5b43d9dc2dc986ea7ddc5e24fd9c0280cc5e0160b3b29cb776c4e949880a17b18b1f639d066b316652b7a63d62d3dfa54e60e843595acc34bc3d8504696cf813747422111c20857b4f20be958aac019ed56ee83ef08dc7e0016b753da6405fcfe231f2ee9100b68df433c9c3b0ee75c0e6eefae163417e54a51438d6e2c5fb130dc0906c3c4291ed5817f1cc7f33ff8ef59e18ac51762cc144898e3ace59f2e87d8e6bd0096c6d3a9b5ecfa8276f8e3367f02c7ce78d920b76e0a2960fadfd6b277f54b1d251127923fd7cfe25f0816b35cd234c195ab2", 0xd7}], 0x7, &(0x7f0000002080)=ANY=[@ANYBLOB="101000000000000001010000080000007ace3c9c84baa52f6202f5ccaff388d2e440e402f3cfdade8c5ebf89b51214d23d19e1c2eb610aa59cb936fafd307e1e6570043c1cd245cd658f560674026896db80a7cc003c161e922714e9d405d50a076db1494fe80050acc1bc3d7c73b49c46fba2d357b3dc155af52a638e4290b621ee8172a77ff4897296df1c20c6885eea57032c7ae74eccf34ba884235256417e684be40743331e5a1fb8e8e8632f40a96b1665b66d1ab7be190f14c0d0a6f6a71d0e72f72b1df92a83a8ea8a558b1afe77c729fd616c9adada9521360e7cf6be96d7a3f85209f42dda53d8949587d3decc7c2d214090005a89cd3e45adf2f316033b4339d03125becec99679264eca6c93da10438813d99b3b0ed286f483bfd4239f3b9029b17c481f570f84122d7c0d3800cc401cac1c2b52301588a17a778dcb8b497565004fc6c1c15d67f22e47e57986535341b64748909b5d733176a442a4e9d89484f10ebf72820839e9e5e75cd8df54a9948c07c6ae616b65df84cfbef5c2dacdd5c33f30f2cd85a7681ebe80a7d9ff4e05a3f2257516ab7a2d263c10860f79f06431d7d70afc34a386f05dacafce9d9bad8196f139c40748d0a7899a769fd3a33b718323b62d8388e3e1c2172d995e92b6c0a7a52b227d5872947ba7c557c895729e13da3aa9785229fd0ef67424cbd6c116bae3a39b39c68e76ea145c212142591773c5559cdbfed5192e36a7f0935b2a9cb159be5dbf3492d2a04099541e9ad1c3e2328e248b61f1c48c2c425d3b9a5fd1d8ecd653be00b18e150a9f4476ace2b3bcca28be5795dc524cc99f45ae46f2642640482cf62b8a3f48a1974badd624ae36e0fce930944a8ff0737f406d933ab45410b43f32fcc1bcc92741dad224837218668537177e7ab2c1e89fb8ae3cd87b60f866eccbb62587832e84e3f5d194d309817b7b8baee3c302bdb8520fb60682c3feecf4d0397890f7cb5ef9957044d22e58ad76417afd6dee853c4af6877f50cc794d1abcc6189902b1989f40dd873f333d84484d44e0d17ed3abf1d1afe43f915e83becccaa96a7b7642582b0f0adf70da9c8b839df6ce20552bc2d78e5d10d58dd5695caba5ccc14c4519e8be7823c63402a8e714c0acd01707c35280066c9dbcc8af5a9adde7822303e5558da354ffb33faee75387846de286cd65b63de30d459766030487d0684f04e37e7e781722f409dea61d7955acdb7ca78f36e9fd4a72eecf6f25180a631312bad19644b6fc7467c4c4442a3dc902270e1befd1a09d6b979bc0b8f8f13f8c74e92e133c274121b9c453bee46d6cfdb5d8373788db1b9a1cd9efbc258706a6a691e694a814423681f42eba1e60edd0aab3a2b211a4c3dcb919dc21ffcd2be3471717cc4abe81be46d2c125e4d619aa8b98ee46817965a85430c37b6a1de204e225e235e0bb179c5ab76252ba06172b45dff4d991a0d1a99fa3d454447f6996f5ff651200e0338cbb58f2408d68e3efe6a3ab9e7f20c8f2567f005aa93c54966ed058c41e1a47d76540018397ebdef748cfbc16a45d38a24e797476ca7199c903a710bfcdb0a963e17365d91eb6060f40973ea81b2971e051c81238ef1a9645309a4261f9cb30d9967a3160e9a536a5704e5431671da2d2c725c475d3404869479ebafea38d6ac529ee309c0a45badfd1222f207762688a4eb0efdefd2c0e034862ae5be6bfbb18834d6e3a4c15fa85e713242048fc25f775b4f1ef77e8882eab7dd726242a0a4914d09756d3c0b6ca9cf553f048abb7e7ab1288e7ac68059e8e816a82198bfbe024dfdfa63e6cda9a57f2dbe8b8a4b903912bf1dbe3b2d27624636591d6bff87f20e01ed1c13204a6e0eb86e463cc5a80a6771e0bd990197c8e278133deb25d4c3aa4c4e12b270fff88407f3c04b078cb96320aaaed1362205073dec6f61438d42ed2176a44eac7c58cda366dcfa33d7ecd3e1f0aa6e0034c282955b7cce25d738838ddd3e5c0319d08821b49cd9687f888f0150e486cc83a8bc5dbf88567d0e280af794bfa4022ce36ad54f7e1b0d2022c2df3b76c7295bfc250a1a8389a577168f5cd6933aa088aabd89997593131aae8f2728644b0290d3fb8a969d744718cbb39f81c2d40eab03dc66da8c6c296a1e5d4899048134c2ab3ca08901889cc70acfed06d541865bb76c5b9f35e352518ba149c042d4513802b3d8683fdfadb3bf8bfe60f3cd0837d29c71577359a9cb298fc021d9fed164bbef8b8d1a3e58ba153679d03e2f33aa5157c6d02ad435bb27cfe1f2efe0d2cf2246a7660f81b4cd382f885c5b1053ea700444c7067c7bdd77802275ceaae80bcc4f2ed364e032ff8d7bf7fac7289cfe9efd4c8d4d794d4b4f38992870f3957a06e61473963156eed388a73acfa2763100948dc7f56bd091f5bf52543bd930a2676476c22a78b14b4759106126e7382d65601f9bcd1a97ba93a7b2dbd83c9f03825ed399262890bc72519535c2b7b569a5b94e91186791738b27fafcc5c75a9324ef7c411353188bf90157193d603f31e4ce3ea80f280141b219bdccd9a621cae1e24219fb2194ea966284ee91a27cafb94505ecf8022f150efe9ae5df8c4ff2efa01ed3aa240e4b0833052d6dd55b7b24111e8007c5acc36b3dc4e496ce892c9267ffe878ea8247f925ba45e9bd9a784e4ff532f05b11fddff74d46878837b630b66d6232f6046ddb897d4e88fef5561a84bd75103a884d570f6ca593c8c065e107007a68735e10f58b76abeae1e39dfe1ee9e4be9dce00420423561bf5c48b484e80fd2948e9237f273606a2d84599701acb43cc6e50ae1f3959bacf271bfabffacb8c59f2f1c04e2184e137eb567f9bb40370729ea8193b83a279cc8f4b5e160378d6f78575b98e82bcba90d7f44e0dfa3efa6c10834b4ed84cdde066bc2b66eee8c231a4af27c10ef051078a2ecc887b7bb7ad1e3c4369cd8ae939944350ab33eb93514f1afac8ae806dc9ee2753cf468a9b4fc38e1ca850cc19bea2a7f6b7d49a1018a49cb7835834aa262d2a3088edf725dbdb4c1de942f60d2a3af5ad3c16b835129e0ed179ce6831039fb01a52a21dd0bbecb13dfdabab473d5a53b135a601c7a368e4ad83d0dfaad4d77311bda7e73b4eae2d7915f78e669cbdb115d49584e966736af63fda508e767fe0448f8d158779a52650a3a19cf4b18ae411d89eee2023ff5dde1a172410e36c25aaf7fc8818f5a74e4108d749f5d4dd656d55a02799a1d97d8b91e2ce722c42c05be2a3cb7e32d8277b78d0d6e883d18a5ba274bc69732d6bdaa46f3963b52894118b867ab5ecc96f32df83ead89da68db11b6c1491e03dcabe94ff035da0eefde909f9d5040af2b2a612c3ab563524815c434b979dfe684f872dff6a0979edd49cc4f68ca94829e64ed141251e4057f80c22caf7f25770b5d2707e3187afa6daaee23203b04741b31dc014b447bd53829fba6185b7f4ba37c96102d9092c98d587c25436098d503c5fdb48b576695df40579bd905015d0e6279bab2d68242735ff65d9d8754488713afd7d10e806ae2610faecef587d8e02f1ea10f025e3a6e10e969603fe6abc3cb4ed76ccc7e9a3d206b20866f08c53b833dc7f7334e7c86b537c3f94e6376fd9bf8fc548ea77f0ce089a6390f4b71c0ba692aee779c0d96afa666dc888c7c3cb7b13fe1a089ac113441c5702d4a8ee99ad54646512b3f41619651edc9730884706424778dfecec3d03ec72c0dc9980bc3128cf7e3c2e29628f46723603be81a39e5f6add5a7026193b7bbdb8be5df741a74dc1a22c987f1470779e82a50093b41faffb576b1bf2f785e2cdd564ff623c8bcc40727e25e4a751e644fcd58b72d6d01a3d1c87abd49f9d5c6c644eae1a17cfa81ff2eba3839e7cf370e36c3b51eedf6a91a8479319d472161e1eeb035359eb0955be2477b6b878b308cdab453ebc00ad85683d80475816a4985da7575f59b085bd21919f5cb58faea933b59ebac9a91b5ae60fe2a8ee4ff90128fb6992660999e043bf5a58354d95affb0a99dd7cbf483fa39904b4fb4389549dec7815a1d582480f0d74b07c1b309460087be72f9274ae6a49f019517bc98cb87e60ae03e8f900b99512ad382fb7a7e0f3b4b0fc25120fb8020db885050402dba9211a6c47fd88ce8273044794c1f6639577bd2a212b289a3fc326203fdc9c3062d2db52590ea359085a09dbf17fc7c1d057b2084f4f6796b792a740ea9d8de2fb4ddaf9f4df8436867580616483e905bc688458e900cd2e33339b9fb147eb633adce1345f4dac1957ee7dc8b6a419de662cc6711a0fbd9d7b780a4672da48c0b2557cf81d03769e94c655cf1a6adaa1eb0793af35094b238aef83523f4d4ef9498684e2654438b30a3728984429d1767d83dadd5386bac84a6d8069303a85087888acdf56d03855873fe5c381d99d52f8a8a4ca8f5c5f0ff8a146b73e13a784ec5c342afc11e7d342126b7cddab5e62ffee3a5d93ae31eb2185d0b5d29348ac981fb0579ed3f98988eb78a2fb72cc8b936cfc95704617915953964863fbc4cb1c74115a8e85904b5e23e94f855eb92360fb29e19490777335e4971db86430945b6103f3311ecda3c4d10536876cc381917ce179595faceea6bc8ecbed124c9763a3ba3ba6bab2f9c6b2581c174fca8073ce90f0d45aa507254ad5f3bb84897eddc859423d6a823bc3502f5c2cc7d72e5c353c5d124a1ffe4a6955f32b76df294ff51f535754fc26d71e7df045a020ab24ab65645cf6fc7046240b9abe6248bc89c0ddc5e6b934df4ff126092c48f8204da744ad7cec3875d5de880c682a2744aa580265504c7de09f4566d665d7475d23a725ed3646f7f7c5faf0ab75ded459cc924443e773e1e14579cb2e5b828e5336759c6fafce77829e4dd6bc3c4000b903b91ed227b855150619dfa178f85bdd4703a3b3cf3cefea3b77855509121727840f0f02da955a1c95e32cb6c5604534591c5d391540d6cfb17d660a3a9a487cb2bbd93966e22e3f51ab04238dd385e21f10dddb66cf44e2ccfcd297f8a3803d634f10ea0f87a3ad612f26c763735669d68fd0a891a4f139de6aa119e9baaac26c373f212ca680a673cadaca77048c9b81d45e086414833f6a62ae2f3831035b8815dfb4a1f900545eb3ecc24ed830aee94031f7c59456a0574a47a8e37519ba85ca9f51b0e38add3c3bad927742cc024c4df7476e9b6008d012a79613a4d090e3a8899b217efa023eee9334d5474541dda76fa7ca924c3c4ec5e30b58d08b06ebd344e33fe8240eb284015885c9930961a8839e2e76b84dc65cc10db5208d48398b3e9fd5b71031fc96e4530067750715ce6c92a10c807b926698ff4a1e0ced440973fc1d0eca6fab2a20517d0725dbd9af51597f8e738792e7e3681f52aea266307b6c51070aa316a63c57e6a1c6e1388d30b58a770ad991f84cef2ba417b1cada8311c75f48c61ad3912886bd3c4c4f4da08880d9852762f286b7dcc3abe04f3c1ff4b3170e49e1c27ec57f02c1872a1906a41f570035af24b7a856c8570e6732826f5257d01a0086a67460ba9365efb217b1abd0e1c536922ec919566c13d9443c4c125d8d88071c076b914e9c6ab237275e12fd363450054c490ce6822def40264a8941a71df3df02ab6d4650ff718c3d64df1f445100c8ae2070c1df785e09dd4a807972bd1e4d51641dd3daac6747832d2326d4fc7da0ef5f6864e6cdbed62cfd426a21d4b141995a02540692fdd5f56d94e471d8614362d06923ca849158ad71d66ca18db02994f8818901c493899162896c6c000000000000000010100000000ffffc0b456a0dd94af037900b4ad49390bcceaf025f70d860de181398529e2efa3370eddbc2cf29ff082887176abf18d6c27726148b62a5baf12d0786c3f809db46b45a6768ff4034d64b03163bb3046164c5fc1b2bbd222d9e47eb24045381be84a190902f1b8cff9d2ee344582c775590015ca5dd95f1fdf05563f5631f9a2ca9c57d5b3e499fe81b1c0dbedf92724df4131cc819d7bced1f44a332eaa79fc8d6850db2845e0b96834d80000000000000000010000000000001601000001040000f5a8b58bb8c6f4ab5376a3ab336dba59d615978fa99e3d0cffdc4b02217a177269ef908f1dcf642df3c9bd868edc4fcdf4d16a7c3a91bee9353dcbeda6c36349721d21886afffca1269d662603e8ceda36980d4a9b9f1a972dddd0eef1bacef04ef196cca3117db50360755bdf9106c6e1c7a421420a71cfdca1453d26ad2e8ab03ae59720695ee36abbeb5df35673a050beb6c89688dce9b1071731c41192fe078b206f09d8d369c9659a1b527bf336eed082159a2735d19ac9215ca174d6b57dc4d4db7742ddd53ea5826c939698976312a005a170c71698bef288afc5dffc0ba0121c01d15dfd82172abb00000000c00000000000000005010000000800001905f7cf97e7d17c3fb58aaff2e02972f7c3c6443f65e285ac6b61ca747e72181dc857d27f97b3baad9ba665f7cc7d320f6384e01d925a546393a564f52cc77df1ca17ae7bd4ec5c58d6d9769931179e8709e6d285d194481e885efec615c671195870999453b0a9e92b8f9498087b08f9fcb2f6910e06e30ae391bc0d0d405a145939c3a3fc181afc0fcd375deb54875ab4bfab073f893023ffc2fd283db3967d81e48123fa0973fbb15dfa00000000000100000000000019010000feffffff27ae0a042024b6220c74964f8b404a897a43d051bc9ac3092475d2d8ff19ce6775a6004c455122336a426517e3b549c1f44775e31871e1f064ca040399ff3fbae3497050437fbd01a313cf76ec6d710b29e846c0ac5c8591c794641e01d288a0a07611a4bff575a89fcbf8d890a219c40164b2c2a120a67814e3ba202c866430b13b5f5c8253f1f4a11250945162ba0e282657ded993a0a6c40a591bf2d6c1b4a6c58caefc91efd57042dfb7b74e49be89f1d41416c5bac119e7bd04a3064eac86bf80ba3932d6157ae545ffd370a9816fd39a73ae8b713b3424d2e0c89ff2ca0ceb678b07c81bd489c525a2656e0000f0000000000000000401000009000000d934e3a8e86af2d53f0b08fbf99a8dc0c4ce1b49b98657553c1845d6a832a26c256ceaf12f1d46106b41e8f193c70c93e6c6bb10feac475818b08b986caeb0069e262dc30b3928e912b3fe3e79a04ecba26ce236c8aa923ec16e6adf591c5226cb08adeac86861a8faf96b5c5ad491572c91b6c0c076a83e1d644aec1b01d24be6454d646b273ab1281405b76312e8bd11d3d543d0f265613c514d7b5e53b0ee76b83d0c4b8a69c9706a20731e313f4cc0c90228b2d9a83ef35b503ca1dcbb61cd330823f71d30ce6bf5539e899537d3dfe23f90843bba095a2265e6b205000010010000000000001100000002000000e40378fe68db53ef2cff3b815b9c8c4f22e3c5de2538dfba5c93acf8273703b4a784ac424e43c396f731a47c3c3b1b9cbe6b9a9d93629995bac08111dbc88d3b5f20aa01e4b672fc817ea6ad942c35600d7a0f204f7e1b94ed9b8567183e35787b177289c0a96146841f0bafe705439be4c310f9b0a3373f16fc34aebe2c98baeccc738a04103e5f9b6158392a12f2dceccb4a27f61edeb6ccfe69b5da8edd1ee41db08f3e3e353d8d4c5c3119b5e82ff89ef71e2945034c8815d76e430fac48abaca290fb1b545302452f297abc9592b1b72acccfa4c307e124e804fb3b7a48b404000f3117845a2dc50c99c610e232331db8f4bf300e4cb69a036b16e80000100000000000"], 0x15a0}, 0x10) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r2) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:30:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf630c40, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:00 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:00 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffefffffb, r3, 0xb) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x5f54, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x4010, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x7, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x4, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)="41b5bbc4c908dd237025c8bad46213fac326190a10b34ad4022e535111163e3f30ef019e9f619ba1fbb861b48a1a133d82061996fcf45aa4c9013668dd3866663b2c9979c2d5baee8017d78a2d359761cddd718408517ec80e02dc15", 0x5c}, {&(0x7f0000000480)="22dad537c9771abbce5aed1fbc1ee0ed2ef6fee32d57d5b3c758852cd74a2eea4ab4a6e9959aa2ace4501f7cd425eee20cc49b778c33b998f8c739c5a9c8dbbf9229b18b41b6392cd47340dc09c19e2a9313cb66197da8db35823c5af65b0f017df845fd64d1043f57ee7885c576012b08c60c86bb82bd829bccd5eae114fd9a3bfad813e454b447a7026c9c7c8e881dac1265beb6eac6793a50ff22ac7b0584e8d3a4579a9436f87c13832463dc0f61", 0xb0}], 0x2) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1394.302194][T31923] binder: 31921:31923 unknown command 0 [ 1394.307976][T31923] binder: 31921:31923 ioctl c0306201 200001c0 returned -22 [ 1394.514513][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.522489][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.532166][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10630840, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1395.312165][T31942] binder: 31937:31942 unknown command 0 [ 1395.318255][T31942] binder: 31937:31942 ioctl c0306201 200001c0 returned -22 08:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:30:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:01 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:30:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11634840, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1397.086473][T31960] binder: 31956:31960 unknown command 0 [ 1397.092124][T31960] binder: 31956:31960 ioctl c0306201 200001c0 returned -22 08:30:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:30:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:03 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:03 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x80200, 0x0, 0x3}}}, 0x6, &(0x7f0000000480)="59e2178a2e2359fa3ee5ff3ac4cd354ffeddc22acc226d810be1cf09d406f98a556987e75435499c74a42c04cdbddcb033dc5959d394aba014d49a159ff4c97e6701e768e9bc9a4b8b10a83667638986349dab5fe6ce9623a52959ec4b8c779306360b", 0x4}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10010, r3, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000100)={0x0, 0x3938700}, 0x1, 0x1}, 0x3) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1397.602635][T31969] binder: 31964:31969 unknown command 0 [ 1397.608391][T31969] binder: 31964:31969 ioctl c0306201 200001c0 returned -22 [ 1397.721093][T23822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.729142][T23822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.740883][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:30:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12634840, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1398.094339][T31985] binder: 31984:31985 unknown command 0 [ 1398.100101][T31985] binder: 31984:31985 ioctl c0306201 200001c0 returned -22 08:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x48}, 0x0) 08:30:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e130000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1399.078111][T31998] binder: 31994:31998 unknown command 0 [ 1399.083895][T31998] binder: 31994:31998 ioctl c0306201 200001c0 returned -22 08:30:05 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x48}, 0x0) 08:30:05 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:05 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8000, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r5], 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1400.191910][T32016] binder: 32010:32016 unknown command 0 [ 1400.197809][T32016] binder: 32010:32016 ioctl c0306201 200001c0 returned -22 [ 1400.791424][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.799417][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.808755][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x48}, 0x0) 08:30:06 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f130000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1401.405598][T32027] binder: 32020:32027 unknown command 0 [ 1401.411266][T32027] binder: 32020:32027 ioctl c0306201 200001c0 returned -22 08:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x48}, 0x0) [ 1401.522460][T32024] syz-executor.2: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1401.538979][T32024] CPU: 1 PID: 32024 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 1401.547422][T32024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1401.557494][T32024] Call Trace: [ 1401.560771][T32024] [ 1401.563696][T32024] dump_stack_lvl+0xcd/0x134 [ 1401.568298][T32024] warn_alloc.cold+0x87/0x17a [ 1401.572989][T32024] ? zone_watermark_ok_safe+0x290/0x290 [ 1401.578548][T32024] ? __kmalloc_node+0x62/0x390 [ 1401.583321][T32024] ? io_schedule_timeout+0x180/0x180 [ 1401.588625][T32024] ? __vmalloc_node_range+0x574/0xab0 [ 1401.594003][T32024] __vmalloc_node_range+0x883/0xab0 [ 1401.599218][T32024] ? vfree_atomic+0xe0/0xe0 [ 1401.603724][T32024] ? do_raw_spin_unlock+0x171/0x230 [ 1401.608931][T32024] ? _raw_spin_unlock+0x24/0x40 [ 1401.613790][T32024] ? __get_vm_area_node.constprop.0+0x292/0x380 [ 1401.620043][T32024] ? vb2_vmalloc_alloc+0x11e/0x3f0 [ 1401.625164][T32024] __vmalloc_node_range+0x33d/0xab0 [ 1401.630369][T32024] ? vb2_vmalloc_alloc+0x11e/0x3f0 [ 1401.635488][T32024] ? vfree_atomic+0xe0/0xe0 [ 1401.640015][T32024] ? vb2_vmalloc_alloc+0x11e/0x3f0 [ 1401.645480][T32024] vmalloc_user+0x67/0x80 [ 1401.649816][T32024] ? vb2_vmalloc_alloc+0x11e/0x3f0 [ 1401.654929][T32024] vb2_vmalloc_alloc+0x11e/0x3f0 [ 1401.659879][T32024] ? vb2_vmalloc_dmabuf_ops_detach+0x190/0x190 [ 1401.666134][T32024] __vb2_queue_alloc+0x60b/0x1180 [ 1401.671186][T32024] vb2_core_reqbufs+0x80f/0xdd0 [ 1401.676101][T32024] ? __vb2_queue_cancel+0xd20/0xd20 [ 1401.681312][T32024] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1401.686869][T32024] __vb2_init_fileio+0x33d/0xd00 [ 1401.691814][T32024] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1401.697628][T32024] ? __io_queue_proc+0xfc/0x8c0 [ 1401.702923][T32024] vb2_core_poll+0x498/0x770 [ 1401.707520][T32024] vb2_poll+0x31/0x160 [ 1401.711598][T32024] vb2_fop_poll+0x10e/0x390 [ 1401.716109][T32024] ? vb2_fop_release+0xc0/0xc0 [ 1401.720879][T32024] v4l2_poll+0x158/0x220 [ 1401.725132][T32024] __io_arm_poll_handler+0x3a1/0xcf0 [ 1401.730423][T32024] ? v4l2_mmap+0x280/0x280 [ 1401.734851][T32024] io_arm_poll_handler+0x322/0x800 [ 1401.739971][T32024] ? io_write+0xbe0/0xbe0 [ 1401.744305][T32024] ? io_poll_queue_proc+0x50/0x50 [ 1401.749337][T32024] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1401.755600][T32024] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 1401.761592][T32024] io_submit_sqes+0x796a/0x8a20 [ 1401.766470][T32024] ? do_raw_spin_unlock+0x171/0x230 [ 1401.771677][T32024] ? io_async_task_func+0x550/0x550 [ 1401.776903][T32024] ? io_timeout_fn+0x360/0x360 [ 1401.781677][T32024] ? __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1401.787405][T32024] __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1401.792968][T32024] ? io_submit_sqes+0x8a20/0x8a20 [ 1401.798004][T32024] ? find_held_lock+0x2d/0x110 [ 1401.802773][T32024] ? __context_tracking_exit+0xb8/0xe0 [ 1401.808239][T32024] ? lock_downgrade+0x6e0/0x6e0 [ 1401.813092][T32024] ? lock_downgrade+0x6e0/0x6e0 [ 1401.817961][T32024] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1401.823511][T32024] do_syscall_64+0x35/0xb0 [ 1401.827931][T32024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1401.833830][T32024] RIP: 0033:0x7f9f05eddae9 [ 1401.838253][T32024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1401.857860][T32024] RSP: 002b:00007f9f033f0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1401.866272][T32024] RAX: ffffffffffffffda RBX: 00007f9f05ff11a0 RCX: 00007f9f05eddae9 [ 1401.874242][T32024] RDX: 0000000000000000 RSI: 0000000000003ea0 RDI: 0000000000000003 [ 1401.882209][T32024] RBP: 00007f9f05f37f25 R08: 0000000000000000 R09: 0000000000000000 [ 1401.890175][T32024] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1401.898165][T32024] R13: 00007f9f06524b2f R14: 00007f9f033f0300 R15: 0000000000022000 [ 1401.906150][T32024] [ 1401.910354][T32024] Mem-Info: [ 1401.914326][T32024] active_anon:63 inactive_anon:215718 isolated_anon:0 [ 1401.914326][T32024] active_file:4620 inactive_file:53517 isolated_file:0 [ 1401.914326][T32024] unevictable:776 dirty:61 writeback:0 [ 1401.914326][T32024] slab_reclaimable:21066 slab_unreclaimable:106674 [ 1401.914326][T32024] mapped:62926 shmem:7659 pagetables:6226 bounce:0 [ 1401.914326][T32024] kernel_misc_reclaimable:0 [ 1401.914326][T32024] free:1154143 free_pcp:6180 free_cma:0 [ 1401.956504][T32024] Node 0 active_anon:252kB inactive_anon:861960kB active_file:18480kB inactive_file:214064kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:251704kB dirty:240kB writeback:0kB shmem:28188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 731136kB writeback_tmp:0kB kernel_stack:14272kB pagetables:24900kB all_unreclaimable? no [ 1401.988524][T32024] Node 1 active_anon:0kB inactive_anon:912kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1402.017394][T32024] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1402.044533][T32024] lowmem_reserve[]: 0 2647 2648 2648 2648 [ 1402.050401][T32024] Node 0 DMA32 free:649020kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:252kB inactive_anon:861980kB active_file:18480kB inactive_file:214064kB unevictable:1568kB writepending:240kB present:3129332kB managed:2718876kB mlocked:32kB bounce:0kB free_pcp:26548kB local_pcp:6428kB free_cma:0kB [ 1402.081193][T32024] lowmem_reserve[]: 0 0 0 0 0 [ 1402.086005][T32024] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1402.112631][T32024] lowmem_reserve[]: 0 0 0 0 0 08:30:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1402.117539][T32024] Node 1 Normal free:3952192kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1402.146431][T32024] lowmem_reserve[]: 0 0 0 0 0 [ 1402.151186][T32024] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1402.163993][T32024] Node 0 DMA32: 2203*4kB (M) 2920*8kB (UME) 2929*16kB (UME) 2174*32kB (UME) 915*64kB (UME) 210*128kB (UME) 81*256kB (UME) 38*512kB (UME) 24*1024kB (UM) 3*2048kB (UM) 84*4096kB (M) = 649020kB [ 1402.183031][T32024] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1402.184217][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1402.194619][T32024] Node 1 Normal: 172*4kB (UME) 56*8kB (UE) 31*16kB (UE) [ 1402.200943][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1402.200950][T32024] 180*32kB (UME) 74*64kB (UME) 38*128kB (UME) 18*256kB (U) 5*512kB (U) 2*1024kB (UE) 1*2048kB (U) 958*4096kB (M) = 3952224kB [ 1402.227534][T32024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.237176][T32024] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1402.246557][T32024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.256470][T32024] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1402.265845][T32024] 18466 total pagecache pages [ 1402.270531][T32024] 0 pages in swap cache [ 1402.274767][T32024] Swap cache stats: add 0, delete 0, find 0/0 [ 1402.280845][T32024] Free swap = 0kB [ 1402.284634][T32024] Total swap = 0kB [ 1402.288359][T32024] 2097051 pages RAM [ 1402.292178][T32024] 0 pages HighMem/MovableOnly [ 1402.296931][T32024] 383923 pages reserved [ 1402.301092][T32024] 0 pages cma reserved [ 1402.387809][T32040] binder: 32035:32040 unknown command 0 [ 1402.393464][T32040] binder: 32035:32040 ioctl c0306201 200001c0 returned -22 08:30:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}]}}}]}, 0x44}, 0x1, 0x48}, 0x0) 08:30:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:09 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40046302, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1403.294318][T32053] binder: 32052:32053 unknown command 0 [ 1403.299971][T32053] binder: 32052:32053 ioctl c0306201 200001c0 returned -22 08:30:09 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2db4a691138b6d79, 0x80, 0x9, 0x38, 0x1, 0x90, 0x0, 0xad5, 0x23080, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd5b}, 0x400, 0x9f8f, 0xfffffff9, 0x9, 0xfff, 0x3034, 0x800, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xe, r3, 0x1) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}]}}}]}, 0x44}, 0x1, 0x48}, 0x0) 08:30:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x1) 08:30:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1404.583175][T32069] binder: 32065:32069 unknown command 0 [ 1404.588886][T32069] binder: 32065:32069 ioctl c0306201 200001c0 returned -22 [ 1404.700319][T32069] binder: 32065:32069 unknown command 0 [ 1404.706089][T32069] binder: 32065:32069 ioctl c0306201 200001c0 returned -22 08:30:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40046307, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1405.018898][T32080] binder: 32079:32080 unknown command 0 [ 1405.025065][T32080] binder: 32079:32080 ioctl c0306201 200001c0 returned -22 08:30:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40086303, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1405.344928][T32085] binder: 32084:32085 unknown command 0 [ 1405.350719][T32085] binder: 32084:32085 ioctl c0306201 200001c0 returned -22 08:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x21}]}}}]}, 0x44}, 0x1, 0x48}, 0x0) 08:30:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x1) 08:30:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008630a, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1405.768342][T32094] binder: 32092:32094 unknown command 0 [ 1405.774241][T32094] binder: 32092:32094 ioctl c0306201 200001c0 returned -22 [ 1405.833519][T32094] binder: 32092:32094 unknown command 0 [ 1405.839127][T32094] binder: 32092:32094 ioctl c0306201 200001c0 returned -22 08:30:11 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x1) 08:30:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}, 0x1, 0x48}, 0x0) 08:30:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40086310, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:13 executing program 2: syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) io_uring_setup(0x8050fb, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x9, @raw_data="485c8bec36d930750e3303fc5f85c9b9dcc4a2a30bb6f47ef9d74cc1e5ed817b90fca39610d40566ffdba832c6708ecd62adcf624c724e455d9bd1e52eddaec05b711e1c010b7609b9347010563b6c852d77bfe7c09430aa3808e746df30cc9a19e9230c706ff539c699fbe1143d07b18132f2208cb320981999bb30ba9b63c239f3fc1459a912cb37c2685dd0d68625919eabb4656e706a7a0fc8b8b41d631a92ba1320c49b46b35cbaa53da377ba5f6d5965d0d30170865aff4e29d1a9ab6569c86855d6edf8e9"}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x40000000) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x72, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) unshare(0x34030000) 08:30:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:13 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1408.053990][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.062275][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.072290][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}, 0x1, 0x48}, 0x0) 08:30:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x1) [ 1408.771784][T32160] binder: 32158:32160 unknown command 0 [ 1408.777468][T32160] binder: 32158:32160 ioctl c0306201 200001c0 returned -22 08:30:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:14 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1409.109782][T32172] binder: 32170:32172 unknown command 0 [ 1409.115539][T32172] binder: 32170:32172 ioctl c0306201 200001c0 returned -22 08:30:16 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) r6 = dup3(r4, r3, 0x80000) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000100)={0xb, 0x103, 0x2, {0x0, 0x1, 0x3, 0x7fff}}) r7 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r7, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x40, 0x20, 0x81, 0x1, 0x0, 0x3f, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000180), 0xa}, 0x20, 0x7, 0x5e9bbba4, 0x1, 0x9, 0x7, 0x0, 0x0, 0x7fffffff, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40106308, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x1) 08:30:16 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1410.815354][T32212] binder: 32210:32212 unknown command 0 [ 1410.821193][T32212] binder: 32210:32212 ioctl c0306201 200001c0 returned -22 [ 1411.455221][T23822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.463390][T23822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.471355][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:17 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40106309, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1411.950752][T32234] binder: 32233:32234 unknown command 0 [ 1411.956520][T32234] binder: 32233:32234 ioctl c0306201 200001c0 returned -22 08:30:17 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:18 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000004, 0x100010, r0, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd=r3, 0x4, &(0x7f0000000100)="81d8cc598eab635613f9da4db952f8bb166d240d0ca0892829213cd1", 0x1c, 0x1}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1412.145201][T32240] binder: 32239:32240 unknown command 0 [ 1412.150963][T32240] binder: 32239:32240 ioctl c0306201 200001c0 returned -22 08:30:18 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40406301, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1412.634934][T23822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.642860][T23822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.651131][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1413.019608][T32256] binder: 32250:32256 unknown command 0 [ 1413.025415][T32256] binder: 32250:32256 ioctl c0306201 200001c0 returned -22 08:30:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:19 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file0\x00'}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40486311, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:19 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1413.843537][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.851865][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.861749][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1413.941435][T32273] binder: 32266:32273 unknown command 0 [ 1413.947215][T32273] binder: 32266:32273 ioctl c0306201 200001c0 returned -22 08:30:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:21 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1415.546436][T32282] binder: 32280:32282 unknown command 0 [ 1415.552237][T32282] binder: 32280:32282 ioctl c0306201 200001c0 returned -22 08:30:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:22 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:22 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @pix_mp={0x0, 0x0, 0x31324d59, 0x0, 0xb, [{0x6}, {}, {}, {0x10000, 0x8001}, {0x0, 0x7f}, {}, {0x1}], 0xa3, 0xf2, 0x0, 0x0, 0x4}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x2c92, 0x0, 0xe387c3f36f8d67a8}, 0x1) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:22 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1416.960124][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.968297][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.978324][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1417.126031][T32307] binder: 32297:32307 unknown command 0 [ 1417.131929][T32307] binder: 32297:32307 ioctl c0306201 200001c0 returned -22 08:30:23 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:23 executing program 1: syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1417.926126][T32315] binder: 32313:32315 unknown command 0 [ 1417.932069][T32315] binder: 32313:32315 ioctl c0306201 200001c0 returned -22 08:30:24 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:24 executing program 1: syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ea0, 0x0, 0x6, 0x0, 0x0) [ 1418.430477][T32325] binder: 32324:32325 unknown command 0 [ 1418.436232][T32325] binder: 32324:32325 ioctl c0306201 200001c0 returned -22 08:30:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:26 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:26 executing program 1: syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:26 executing program 2: r0 = syz_io_uring_setup(0x5447, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x4, 0x438) io_uring_setup(0x1ddb, &(0x7f0000000180)={0x0, 0xc99e, 0x2, 0x0, 0x347}) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1420.257324][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.265378][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.273358][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1420.294225][T32351] binder: 32345:32351 unknown command 0 [ 1420.299845][T32351] binder: 32345:32351 ioctl c0306201 200001c0 returned -22 08:30:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:26 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) 08:30:27 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1421.359524][T32381] binder: 32379:32381 unknown command 0 [ 1421.365317][T32381] binder: 32379:32381 ioctl c0306201 200001c0 returned -22 08:30:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:27 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) 08:30:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:27 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:27 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x1000, 0x80000000, {0x0, 0xea60}, {0x3, 0x8, 0x0, 0x5, 0x1, 0xde, "45a1d984"}, 0x9, 0x3, @userptr=0x2, 0x3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1421.850140][T32394] binder: 32391:32394 unknown command 0 [ 1421.856105][T32394] binder: 32391:32394 ioctl c0306201 200001c0 returned -22 08:30:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:28 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) 08:30:28 executing program 5: r0 = syz_io_uring_setup(0x5447, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x4, 0x438) io_uring_setup(0x1ddb, &(0x7f0000000180)={0x0, 0xc99e, 0x2, 0x0, 0x347}) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:28 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1423.211464][T24216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.212386][T32420] binder: 32412:32420 unknown command 0 [ 1423.219402][T24216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.224980][T32420] binder: 32412:32420 ioctl c0306201 200001c0 returned -22 [ 1423.236566][T18861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:29 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x0, 0x0, 0x0) [ 1423.917594][T32431] binder: 32430:32431 unknown command 0 [ 1423.923537][T32431] binder: 32430:32431 ioctl c0306201 200001c0 returned -22 08:30:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1424.273085][T32438] binder: 32437:32438 unknown command 0 [ 1424.278829][T32438] binder: 32437:32438 ioctl c0306201 200001c0 returned -22 08:30:30 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1424.605475][T32442] binder: 32441:32442 unknown command 0 [ 1424.611436][T32442] binder: 32441:32442 ioctl c0306201 200001c0 returned -22 08:30:30 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1424.969000][T32447] binder: 32446:32447 unknown command 0 [ 1424.975038][T32447] binder: 32446:32447 ioctl c0306201 200001c0 returned -22 08:30:31 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @sliced={0x37, [0x1, 0x1, 0x1000, 0x8, 0x40, 0xefd, 0xdb, 0x4, 0x6, 0x100, 0xe3a, 0x4, 0x1000, 0x40, 0x9, 0x8000, 0x80, 0x2, 0x8001, 0x7, 0x1f, 0xfffc, 0x3f, 0x7, 0x2, 0x7, 0x3, 0x7e5, 0x7fff, 0x7, 0x0, 0x1, 0x100, 0xc45, 0x9b, 0x2, 0x1, 0x1, 0x4, 0x81, 0xff3a, 0x0, 0x5, 0x400, 0x1, 0x1, 0x4, 0x1]}}) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000440)="9595"}) sendfile(r6, 0xffffffffffffffff, 0x0, 0x3) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400400, 0x10) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:32 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:32 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0)={0x0, 0x6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0xd0d3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x3}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="03a16ee941ef8cbbb37d39fe012919de42da0b81e2374a", 0x17}, {&(0x7f0000000480)="96be662dad2bf7117dbce9a65efed7bc116e823f1bc624c477f9d63196b8ca495e6d16cb4023238bc09a06e1b8c34ab30596c0389b0bd1974e73167b950b965d9ef4bab4c12b4dc0102ad2a213037930f27d024971fdc6a2fd50bc222c1de71776b083e58c604764f688aac1c18b4384a9e3b165e1906bc8f6e62bead7f7f67647e4c72cf75e3e9576ba64d3cc6c922982602e82783a49565ac5bae1f925d5bd68687a100acafb84d197b0f8f22026abc41fb5d0618a9c97fc6ae258c6894224f1566c094a9dfd9696f70abe8f0d81ada9b7e87b53cbc96643ed6ad3a6d4d8a34c829a457e24c506a6", 0xe9}], 0x2, &(0x7f0000000780)=[{0x20, 0x10f, 0x3, "7a775677ead4dcdc4d7e276deb14f138"}, {0xf0, 0x101, 0x1ff8000, "3a4519e0d8534389a7acadd64360b8180696462217d774db0fcf96da0680e8477fcb32d1e7718c257ab77558f2e56d1cc069832eefce5a6cb4e81ca30276acd78dec8b265ca0f975d1a88201705625945176a795b60aff246996d41a51bd50ee3bc5ba71163c05760ab8cceeed60a14c02657ace171e649759d1ede1f400ad2279e3e9e9c179f0b501e8264378259f95cf1d21cbfe5bdc66182abc4a48b7d3c84f1279cc4f1ad9aaa16283f8f10672bf2390d89b04948abc31de1ee2d1c066bfd95ad8c9fd7037c005a2b95c72398df122fbb6b00ca4bdd67de9c3a91c495f"}, {0x98, 0x29, 0x2, "06b9ae9a520ca6c9c9fe6b889ec60a04029e5ad9e8d7db3e972c7ab0a6830b290762dbd23842b3c7fc8f820c6f163c36287f917e6faff84b7865ec7abb5b941575cfca1569e4c75e836ca0bb286119e02d34af57f30e86fb03438eafd106a42e77d2b36168a45a0284fe09e346475773a964946ff295405a753b1f8f8d3c96dc34e0338867"}, {0x68, 0x103, 0xffffffff, "6bd284ad983d58d4fcc8412e99f9a3f02e8cd5afb46f4ec7a4fa14931b03b97a1919c07b6e119396c01f1bba7e0884ff4233fbcb9c5f2896776f54f9dc9b36e5e72cdca26b534f8e59ce81307f61b4275465c798ed"}, {0x40, 0x119, 0x4, "97cc3bbca0bb062c6c521175c686b6fb53a72c11975a690d06168080205b5264abb27ecd4f236d306661fbd5"}, {0x90, 0x6, 0x22, "3b2dc371ba651218aab40c93bab3957f9062d26f7743bc100ecbcb1319b42e1c117e0bbf076c0e296aa1f99c057a43d7d8fac318a6fc3ef52eac5c1d4308ffbeb674f51da7d59d3aec6fd0039c48dea01b65d65c26cfef04217fa8f4280b9cd7a19853f703694b66730ee6b370af085c433037ec99429775af"}, {0xb0, 0x111, 0x1ff, "9b4de2bf9331028286425cd9ee009a0d08edac3c7c896fe50fbf873a2b76291bdee89f581a93f04cbad824e3078eac5a70e75303d3d48d7def6eb9ca5c70ede5c7d833a209486674bb67410702b1c8741846ed53db45605c368b234d38506d512d9ee0b89eefe3e55fa97c87d2669b59cbfdb4e7a3a3843f0e46fe0901668f5f27286bb129f8501704cc7c52052b34a97b6ab4d106274520acd691"}], 0x390}, 0x0, 0x64000814, 0x0, {0x0, r4}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:32 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x0, 0x0, 0x0) [ 1426.657417][T32470] binder: 32469:32470 unknown command 0 [ 1426.663179][T32470] binder: 32469:32470 ioctl c0306201 200001c0 returned -22 08:30:32 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/131, 0x83}], 0x1, &(0x7f0000000780)=""/164, 0xa4}, 0x7}, {{&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000840)=""/151, 0x97}, {&(0x7f0000000900)=""/139, 0x8b}, {&(0x7f00000009c0)=""/236, 0xec}, {&(0x7f0000000ac0)=""/178, 0xb2}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000b80)=""/198, 0xc6}], 0x8}, 0x4314}, {{&(0x7f0000000d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/101, 0x65}, {&(0x7f0000000640)=""/16, 0x10}], 0x3, &(0x7f0000000f40)=""/5, 0x5}, 0x3}, {{&(0x7f0000000f80)=@nfc, 0x80, &(0x7f0000001000), 0x0, &(0x7f0000001040)=""/139, 0x8b}, 0x10001}, {{&(0x7f0000001100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/213, 0xd5}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/4096, 0x1000}], 0x3, &(0x7f00000012c0)=""/159, 0x9f}, 0x2}, {{&(0x7f0000001400)=@l2, 0x80, &(0x7f0000001680)=[{&(0x7f0000001480)=""/1, 0x1}, {&(0x7f00000014c0)=""/228, 0xe4}, {&(0x7f00000015c0)=""/192, 0xc0}], 0x3, &(0x7f00000016c0)=""/192, 0xc0}, 0x4a}], 0x6, 0x20, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001900)={&(0x7f0000001000)=[0x401, 0x0, 0x80, 0x81, 0x5, 0x2, 0x1], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000001940)={0xc, 0x102, 0x1, {0x8, 0x7, 0x3, 0x2f}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:32 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1426.885037][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.893263][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.900966][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1427.128648][T32489] binder: 32486:32489 unknown command 0 [ 1427.134457][T32489] binder: 32486:32489 ioctl c0306201 200001c0 returned -22 08:30:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:33 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1427.985812][T32506] binder: 32501:32506 unknown command 0 [ 1427.991499][T32506] binder: 32501:32506 ioctl c0306201 200001c0 returned -22 08:30:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:34 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) clock_gettime(0x0, &(0x7f0000006b00)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000006880)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000780)=""/229, 0xe5}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/17, 0x11}], 0xa, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/77, 0x4d}, {&(0x7f0000000b80)=""/14, 0xe}], 0x2, &(0x7f0000000c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/53, 0x35}, {&(0x7f0000000d80)=""/3, 0x3}, {&(0x7f0000000dc0)=""/100, 0x64}, {&(0x7f0000000e40)=""/96, 0x60}, {&(0x7f0000000ec0)=""/212, 0xd4}, {&(0x7f0000000fc0)=""/132, 0x84}, {&(0x7f0000001080)=""/155, 0x9b}], 0x8, &(0x7f00000011c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001240), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/208, 0xd0}], 0x1, &(0x7f0000001300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001340)}, {&(0x7f0000001500)=""/117, 0x75}, {&(0x7f0000001580)=""/87, 0x57}], 0x3, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001800)=""/243, 0xf3}], 0x1, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)=""/241, 0xf1}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)=""/117, 0x75}, {&(0x7f0000001c80)=""/183, 0xb7}, {&(0x7f0000001d40)=""/116, 0x74}], 0x5, &(0x7f0000001e40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001fc0)=""/39, 0x27}, {&(0x7f0000005080)=""/130, 0x82}], 0x2, &(0x7f0000005140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000005180), 0x6e, &(0x7f0000006440)=[{&(0x7f0000005200)=""/33, 0x21}, {&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000006240)=""/227, 0xe3}, {&(0x7f0000006340)=""/16, 0x10}, {&(0x7f0000006380)=""/144, 0x90}], 0x5, &(0x7f00000064c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000006580)=@abs, 0x6e, &(0x7f00000066c0)=[{&(0x7f0000006600)=""/88, 0x58}, {&(0x7f0000006680)=""/34, 0x22}], 0x2, &(0x7f0000006700)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}], 0xa, 0x142, &(0x7f0000006b40)={r1, r2+60000000}) r3 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r6 = io_uring_setup(0x8050fb, 0x0) r7 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r7, 0xffffffffffffffff, 0x0) ftruncate(r6, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1428.838435][T32531] binder: 32525:32531 unknown command 0 [ 1428.844587][T32531] binder: 32525:32531 ioctl c0306201 200001c0 returned -22 08:30:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1429.208439][T25195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.216441][T25195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.225082][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:35 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1429.549343][T26954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.557608][T26954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.567580][T18861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1429.672068][T32547] binder: 32545:32547 unknown command 0 [ 1429.677665][T32547] binder: 32545:32547 ioctl c0306201 200001c0 returned -22 08:30:35 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1429.826724][T32554] binder: 32553:32554 unknown command 0 [ 1429.832691][T32554] binder: 32553:32554 ioctl c0306201 200001c0 returned -22 08:30:35 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x0, 0xe, {0x0, 0x3, 0x80000001, 0x6}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) 08:30:35 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1430.181264][T32563] binder: 32560:32563 unknown command 0 [ 1430.186858][T32563] binder: 32560:32563 ioctl c0306201 200001c0 returned -22 08:30:36 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, 0x0) openat(r4, &(0x7f0000000100)='./file0\x00', 0x600000, 0x2) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x202, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:36 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1430.516311][T32571] binder: 32569:32571 unknown command 0 [ 1430.522072][T32571] binder: 32569:32571 ioctl c0306201 200001c0 returned -22 08:30:36 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1430.741873][T32575] binder: 32573:32575 unknown command 0 [ 1430.747573][T32575] binder: 32573:32575 ioctl c0306201 200001c0 returned -22 [ 1431.032782][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.040849][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.048524][ T8369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:38 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:38 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x5, 0x9], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @private0, 0xfffff800}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1432.457053][T32600] binder: 32598:32600 unknown command 0 [ 1432.462851][T32600] binder: 32598:32600 ioctl c0306201 200001c0 returned -22 [ 1432.499929][T25195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.507961][T25195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.516108][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:38 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1432.724442][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.732880][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.741548][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1433.567115][T32619] binder: 32609:32619 unknown command 0 [ 1433.572792][T32619] binder: 32609:32619 ioctl c0306201 200001c0 returned -22 08:30:39 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1433.810410][T32623] binder: 32622:32623 unknown command 0 [ 1433.816145][T32623] binder: 32622:32623 ioctl c0306201 200001c0 returned -22 08:30:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:39 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1434.088453][T32633] binder: 32632:32633 unknown command 0 [ 1434.094450][T32633] binder: 32632:32633 ioctl c0306201 200001c0 returned -22 [ 1434.828837][T32602] bridge0: port 3(bond0) entered disabled state [ 1434.835404][T32602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.842624][T32602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.269361][T32602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.318979][T32602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.700144][T32602] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.709384][T32602] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.718441][T32602] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.727369][T32602] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.866417][T32602] device erspan1 left promiscuous mode 08:30:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:41 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:41 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r0 = io_uring_setup(0x8050fb, 0x0) r1 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r1, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1436.000163][T32652] binder: 32646:32652 unknown command 0 [ 1436.005944][T32652] binder: 32646:32652 ioctl c0306201 200001c0 returned -22 08:30:41 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3dd0, &(0x7f0000000180)={0x0, 0x853c, 0x10, 0x2, 0x266, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)) r7 = socket$key(0xf, 0x3, 0x2) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x9) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1436.065842][T26954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.074002][T26954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.084727][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1436.177500][T26954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.185774][T26954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.193531][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1436.206200][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.214415][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:30:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1436.223267][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1436.413546][T32669] binder: 32668:32669 unknown command 0 [ 1436.419439][T32669] binder: 32668:32669 ioctl c0306201 200001c0 returned -22 [ 1436.767769][T32674] binder: 32673:32674 unknown command 0 [ 1436.773664][T32674] binder: 32673:32674 ioctl c0306201 200001c0 returned -22 08:30:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1437.149914][T32679] binder: 32678:32679 unknown command 0 [ 1437.155963][T32679] binder: 32678:32679 ioctl c0306201 200001c0 returned -22 08:30:43 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb63, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1437.468584][T32686] binder: 32684:32686 unknown command 0 [ 1437.474642][T32686] binder: 32684:32686 ioctl c0306201 200001c0 returned -22 08:30:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x1) 08:30:44 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) r5 = open(&(0x7f0000000100)='.\x00', 0x480, 0x100) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000180), 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1438.464808][T32708] binder: 32700:32708 unknown command 0 [ 1438.470785][T32708] binder: 32700:32708 ioctl c0306201 200001c0 returned -22 [ 1438.488955][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.497218][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.505240][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1438.648412][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.656650][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.665617][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd63, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x1) [ 1439.024447][T32720] binder: 32716:32720 unknown command 0 [ 1439.030502][T32720] binder: 32716:32720 ioctl c0306201 200001c0 returned -22 08:30:45 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x1) 08:30:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x1) [ 1439.563048][T32732] binder: 32727:32732 unknown command 0 [ 1439.568677][T32732] binder: 32727:32732 ioctl c0306201 200001c0 returned -22 08:30:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 08:30:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:45 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x131e, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:45 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x3204, &(0x7f0000000180)={0x0, 0xdc0a, 0x4, 0x3, 0x56}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000340)) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x2) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1439.954868][T32744] binder: 32743:32744 unknown command 0 [ 1439.960631][T32744] binder: 32743:32744 ioctl c0306201 200001c0 returned -22 08:30:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:47 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 08:30:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x131f, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:47 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r3, 0x4, 0xffffffffffffff9f, 0x20}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000180)='./file0\x00', 0x44, 0x0, 0x23456, {0x0, r5}}, 0x9) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r6 = io_uring_setup(0x8050fb, 0x0) r7 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r7, 0xffffffffffffffff, 0x0) ftruncate(r6, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) io_uring_enter(r0, 0x63df, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1441.272322][T32762] binder: 32759:32762 unknown command 0 [ 1441.278022][T32762] binder: 32759:32762 ioctl c0306201 200001c0 returned -22 [ 1441.299560][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.307519][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.315724][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1441.407729][T32762] binder: 32759:32762 unknown command 0 [ 1441.413673][T32762] binder: 32759:32762 ioctl c0306201 200001c0 returned -22 08:30:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 08:30:47 executing program 5: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:47 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x4d0000) sendmmsg(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)="6fa086632f5ef33b987a54b79392828019201ffa9d25b4d2abd52992ec407e3c997c96dc8f70e6d540e0a995bae6a1ab1ac659f807be4f67e493d3b86d1291ca7747087be2da3a9e85c5530e523be0c99ba045cf6b393cc8e67b9cbd15c0f3bf5451a396d1e06a956cac455cf2437c03c71f7a9b002d2416d6f59f75eb7d88a83e24013c3c9d2cf892d4a5527f3a2a03599297e4f37ec1f640955c488d284f", 0x9f}, {&(0x7f00000001c0)="7c226a88792b7bb6955f5c2c2fe48973f04d0d70ea5a482b2aae1fc97e900e2a85273bd8ad14a355e23ea89a9e450fc1feace91075d552a197033f", 0x3b}, {&(0x7f0000000340)="96f016df891bd748f1b996ec8ea25e0107419d", 0x13}, {&(0x7f0000000540)="c97006e277878b0e1fbe50029046152b7df05abc6ad2edc8efc8ea8a1885a0a0b931b30251671a3e280ff0", 0x2b}, {&(0x7f0000000780)="5dc7ce52ec7eea39ebd4cc0874a38ce0ba7d05353d1ef06d7a2fd02982db2496c7810a2b22985c0608d3f82d992bd13efe315e024e30825a7aa3fb9a5e9fb54943a9cf67ab19d5ad2bbf792082cff1e25b8809ea7c3d7a21502ea643b662a6563a7702310a79330bffdee3aa9ff92bbc8f68014700d977028e2bb9fab95179ed19ddfb2049a79f1d6baf0bb8a0da118a2c4c45e31401104d1c61666ac945cbcee04fa58a2b0d34a9", 0xa8}, {&(0x7f0000000580)="c041e1cbabceff5721", 0x9}, {&(0x7f0000000840)="0e36c7a817e5715bdd38e85f0c5e7328bb12f8cfa2372454555673cba387e9fcb5e881fe0336fdd46c55cf994a816dd4f22b3259065424f03ed97534f5835ca10c0b1f3ed6c1000f4324e4299e2118e78424677cbf4de43ed2d26af418dd0a2b520c52ec8de6395fdcd68f067efa5c5bc18e956f895778d649f942b3c0031fb9b6a7067267cd208e009cf26cf77ca2e715edfd2314ba7d9a536ff87c7a3cd4acc1eeaafb139d18ac8153425d49ca25d23407f2dac1090f5bad158adfe7c4dd32a11e91a85af1a8750d96ca06870c54e8c93d6ff5559b", 0xd6}, {&(0x7f0000000940)="2756a5e19ce565b4de5f6f5f0a4470e36b97e1b190595d029099642e8a43e1cbfc05667c7fcb822026b8ce47e5431e0848faf8e9f5db72554861ca02aa7d554f5cfadf9fa1babcb6e46154d2ddb347bfded09f475a1c4959e117668777264be1dd3f29e275ac1bf3bba9c26730da4b2b178789d74b659a49a7a9654d97c0adf8539aba7c40b81b2658927a13b063c3c8edaab3e5d174f6b9f46a54f3ce8482ba07a0000c6071e4e7cfae53bf8be7beeb7477330d7d6ef1a77e97cf5cf1e6a62fa1562320face0a0254150d144b1925f71a3d4a68f8260e9796bab36fb72af866fe59789a68", 0xe5}, {&(0x7f0000000a40)="63d81c5c9c2da6222e20b5017f20e43a7416be4285c3e6733ff5cc55b78eae636c380953f45149648ef6bd51fa719291735880f22ffb27cc6c74815eee0a7bae3137dc1a9030991c42ff3770f6", 0x4d}], 0x9, &(0x7f0000002080)=[{0x1010, 0x114, 0xfffff8c3, "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"}, {0x1010, 0x111, 0x2, "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"}, {0x18, 0x105, 0x7, "252027a1487a9b5d"}, {0x108, 0x118, 0x6, "88cc35ab7a3e8a27fb789ae8fd3ab5df20813b64965a46fc5cdfeb2184b073774d45856bc64e0664a97ec6d9210f08dbfa4b1f2c5a882086c6c5751387e52f0bc1329d7cf651dc16fbd15d76a6b2d22cec39abdb3a6a85dd025a7ef1a7d0146fa11e5cf1c60797dbe8a32892d66641afea8712ada34bcba1754b0ea66c0d77a4dc826280aaf59a4613edfb86f98dc89bea9344946f5cd2d38299b071c5f6c7b8eca1188cb3a4fb1d87180193c7843bef3bf300c7c71cbb60b9bb9840dd1b51b2591381ec0a951f8094872f3e4cf221a1a741b7cb9b8b7a88624b5cefce4d854f9daf353c15454349cca6ee66e2373a1ffb"}, {0x18, 0x84, 0x1, "c894b94bc96611"}, {0xb0, 0x116, 0x0, "cd8bf56c1d24bcd88aefdde0e6958b2b0b38666b34719a88777d58b66ef432cf2722a5a24e6a62ca7a661e116ff5eab40e9d2b73fff51d5e586f537913bfbdc2a2ffcbaa2b598559b91cd44586f4c4ce9e020edff3ec68862c7458a6b42315a0cc998ae2bc93d8ac9693c6508887012836c1f63224d498d3f31b2195ae3893520a840fd2f6ce0ec455bc60bbda9a69ccc0c04aa6b6e9f33171"}, {0x58, 0x29, 0x8cb, "546d64de3a12500bd96205cf322e8b9c9f5f4041a7dace74952b9fcbe1ac248e3ea86463def8eb9b36ad0aad4f55abbeae8adc43bb9301ffa842050c588baa881eb4a593f1"}, {0x108, 0x10c, 0xffff7667, "02132c0f5046c159376f6acf6328a67178ae9806e95935aa9e8e9af78f72f957ba97339ebc70bab884eabe83af05badcba19c2691ef9edff0822dea44e0ba583342c6afdaa65bd34be53144870b9bb31c5c442ac9471e15ff053766105ff984344d0be21dcc20854e22f602e50fee07370b586a0459a503f10d82841fe9ffa9df86fcf4f6122383e9cf17d4300f35c13a2e75a234c1a383990d005944b051531d25c8c38110f7f92ec37df62c52e9bf60d2a0d849f1d878181d77828371b74fcba23b6799eb0c9467e1cb59d4943aa0be31d25dc1b0139176fbe2e860fe99effa9f1e6e7212f3ad34839e9ef521de7ae163e2cb271"}], 0x2368}}, {{&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000004400)="366b56bccec4502d62130c9182ecbb6ebec5f10c36c744354b564c46d051c32afd74df1ce2908e8abe3f072199f4bfc54bfd2587bfb0cf0031271e0451f8e7a12a12fc7e6272c53f1e08fd2464a79e90b7ffb100bae64662fdd7cb0e7832398fee75242a66494de8fb6fc016a1fbb7c87b392adfaab9706cbcf6e25f438b0b790519ae6864b9036fc064b19ce79ba25963b08db6a618e6ef1a04e4bc2a8bee0421ea7759505107b0128d72e02347e9f1a2f49dc24e22246cb612643d6b50d4cdae3a4c43aab7a1d471bf79a2f14e713d5ecca19155b82f258648e9668d3d4a64a5febb848c4fb3e1f08479ff22dc21c34d0f611ceba269de7f6e27918a813079b194b40284be3973a984c8dbbea3aad551de45253064efeff943bf3020c19420d19cbddda76c754fe29aacf8047edc9f6db907e01c8ad2949717cbb2aab8a965593cc9fa63d27f2d60173768d0991297972c26288eb2b88799567768f3c7cf44012fad4a06a43f7b0c9b66660507a533e6a90c58c922ba08a07f597f9a510071a43652ec48c8b25d6bc518c0039196b1fd3a4518650f1ec1a37eb7c6e457545d8a2974cf633b8ac84e0b575a1d308b874866ba357b2d131005f4bdd20e7445ca6512a9236393bd74acc7ea8c7f6af0cf6aa7aa1c920cdada130db1f6e6f241cd5001b3fbb5a1d3675f1719effbd8426096785a48bd9d5f3274dcbc5862e70abcba5b3a6ea18bc0f06000469fb9c19ca5766bb76a7b226f02ba27a17e7907e655e034fb6b014b6628066902eeb62faa321f7b8ea3c4c99caf222bd395e8569cc44d84f734928df80a615c5bf875bf8b02060ab4aed0d2acd1c7b1393ab365a94902ede8f5ecdee01b9aa5e8fa54ae358d09f33ce4124ad98bd259e237b8c831a2a7c5c6eee957ac7948a8a1f3735a164b6fcabd129d18c8e48589c96ab9eb33c1c4f9b8a78b2b4e3dc9a1a31b6d82e80b5d3c292eb6a99d87a01a19d08d57bf79fd6d91217fc8150f7fc50b5ecec63dc1048ff154dcd3ff796b8e272d178be4f5e8180f0ed6967c9b3ec4a99891884ba57dddb75a149b90ed6b43d3447ae9dd644b0dd1ab99c44e72c0e6bcdf9f4bd9acb1571d8891c5f77702c53eb1f08d8f4adfc2ae61221df7e0c133ca93ccea45442181c550233071ec71f0d08f2c01945031db001af377ab8c349b2af671091ae9d4aea1e3d6fb6c777989ede679a5393c96ba0d386d09465556908cf7dd5e3afb2748121959dbced95f5ad609bce9ce072ac7d0e450879abc267e51e6b694689f5cafa6e279bbeb4490135a4bab1cc0708838c521e41c4629fbbcf29a03cb82caedea22465944b2e794410a96e23cc7ea3b0b872fd3f625a92306801fd7328aa62309c55a4339d0b68fd844a5afcf37e2f7567c3a1c8f316a3f844e2abfae3de12f2e31751df557201af58a8ef0e6e6d6cef2ac1a959e64dff8c39ef174057025ca05434cd8add453667db9cb54e5163ebf5b7a811c4e3aa33fed52bd1be05cfaf289df406efdf80aee732ab0850eb79546d47d7bf2f798d0048ae0cb676e612bc88c23bdb853a91f68f1f48ddd7cc6d4440e1d426e97eccd78bf28a6a7154aafa74e25885bdc0b017df80e06fec4b31b3023b31465bf04d54361488d38671cee83b86a95aeec37bce8fa133a3d5259b62453e3387071c64da0eb0bd00a371fc67b3ce695f391ee0edb34f6a600ad1584b8d6df0e25395f4c8d7c3b5e4518cad1dd78ef997aad81f703053e38e809d5316be9f8aeb1f0b3195e30cbb8ffc61ba6acb5691a52e573b6f409ee0715f26f01dbe8d5bda06c3220c1bd10f811d8f24312f72163c4322504f912932b48337f6d925c27c215eebc531971db879191a61acdb0af57541bc8a532661a6a48ffd645130198b5d6ea9836ce980cbc39d0b43572fd2e911682e50313d7ce5bb545d3ac399a37bc8106c56a0525d094d8b729772b6297af07660eef93b771193437602a7256b048a652bccd35488bdbf04408d49df674d745d6ac75c513f0758ecdb74dc983d35e0c59786c5813f08543583b2d65c537b934dde93fd68dd285764373b6818875539f3ae6449e682bd4043ba93dcccbf039eaf313bea76486f747141ff598ae5c40211469a87655ecf4cd50a831e112cc726a9c34432cb97b77d5bf36a3df72d64e36990f6f72e6a3f1d398bc5decfd2f2f015253c761cc54f335d9c32d4f9927f459e9dc490b79316b5ed2d9a37758b66afce6a44b2b5e178b57c9749e714aeacce6868607298190d91885e106734576b6aa2e0ab22c5927fca21fa682271f18c3307b61ddc6b1c94361266a9eb27ce60f6a565a2ce7bef02579eef5e8d3a6e3b3fd420a4ddce5748df9913152b451961e459e5cab415ff910eaa8d94fa91b7166cfdda6b0ffa6df58e3f0f980d9ec418bb1b678e15d4ca0ce02092c803b8208a65121ab62fffe347a9bc0f21b04a710d02fab3b643cac6e2a98b856d96080df55f8eec8561ff0f1bf5e6302a2ad03430b2c59d152a28a8f2a462606cc85c44b3ce430ead42f388985aef586b1e0c608cadf25a7eaa3698ca39fe81d7533cc0c5569609fe1449d2a990bffaaa0a63e33a2a1dae0df4f49b11a743404458c7006675aafff037bf717175172702053da643db25a3c7b101788a6cc8887bdef49021622dd4ecc703d5138d59463b97a4882dcf5567f5bf05add1176e194fdfad93efcfd26aa749ec24682b72008c39983fd38cfc6e73cb3f74fbd8dd0d644544c066d08ddd42b434d1c32e09edd4c4cd8ad88e9b4e1b988ce01949db69d321a11a9c39276207d072ee079852c8158e2d331100c5f103e19711768b1fceb6471b4efb723ec7970acc7885e6ea18df4cfd457252ba5638e6a1065808c16b1cc2681614f64a5c52965920fd28282536b92bd7e7f1acd70c06201be00c922ab08395519a705c6694552cf3e91df4825ea402305f6487c1f4645ca9572ae2bf4424f037e55b60b8357343b3d7f6a1c66e55758e371048ef22cbcf76fecd787164f922a299bd6c1c9af61b4095c3f88e574ba1f78036876a4b098c430871198c2b253a13ddbc6d29f8bd422c53ce350840c55b0443be2a272d6d3b54e9d4b2bbe7a0d844fe4be56ce11bd44d168436ed64989ca03b09b139001846b49be528720056b659cdd034b92a76b511163ba085450ae01211319eda2083cf8535a677b1555ffc5872f5217aded238efe11f9e34fa0b507d334558097bad0a5d7720647f03610403b2603d15663344969487185968bb9670c1306dc872376066112dcae028fee9a63cfa0c5306fbe967b59c1bb3db0b04a264953412aa5f2c0f9d6493622866a2079fee510d33e363689f4d6b0cda246920eabae875d25e1c46584a571e9eca9a295c7a1ee632164467c1de15e38f6159bf508c07eab6d18ee58a9455cfd1940c774e1640857e84ec35e3c86bc3968f18743deb6a7b1eed4863c3970e896107c5c189eeae1a5eecdeacd9f10bc4c125472c2013ffad1df2946eb9df0cb2bc6928ce1258deadf003ed6a31f53b5409b4eee41923483a68201486388444e054e2aedfd1e3ac36140cb827a0b7a703faed8fcfd56f63a5360e4734b8be1cf27a3edbc75dc122aabdb08ecd7b810e4943d0fbdc924dbe58bdf3136dd07ff0fb8b09c622a9f8a275a8e51577fe73e5e07e46320ab702eb10449e0d6fe2c56ac20ae659f014a36cdb1d66d7a1e6878d72af15ac245a4a4499f3d4f9bb7160a887df323a8e2725174b1c3b8f097e706f9dd7ba92722b09512afc5222346463f8d67724c2f42fbce29c3fd3c567f37f26b463e3d46bebc5d834e9db3e4360c677bff886b70dcfaea39fee62a1205a756d7ceee6960cd1c2ddd0d62e53cd6a426260cdf3d7e0e99c309a9329332a32a26d53fe6e50b904a9b329b78c56e5db5b81668943c8bca0764d30e7aa4c78447d8c85a5bff6f28dfc1ac9934f61920c63639eb4d3328e1bcacc44b11a5b6db8ff9b819b16ef06c10efa32b304651ab2a4031e900a2ab9bcc6f6d8cf6304399980f546066b1bd76438c2d2f9686a5b1e76253b306aaea50fd87db9e27d7dfe7f710a54cd6b638d456cace88827c45ed25b0690e3b3295e84976faacd386b8e4289ba113365a30bbe84ed89727c9190373960989cc160df7c375c5826d5b9e7c07027d3e17bc7379963cf9cfb6be362dc96d14f1b05eb645a3cd30c285d43cd80cbd341e451b791b8a82485fdfab9096ab183fc37790ff276f0b91ff72a8625ab7025f1c227a3286ce176e76c221ecdce88724ee80ad59ecf452f31be93b23abe471f17e5a1b806a81af16c2e301e000f52f6fd9d7b7170e13c1669b671ec3b83083824b3fbff62921b67da475589154cb5b257eac3e4f15fafacea46907ea71fee080cc37eee43dcf5016ef8e3e94cbdee615a38a53aedcb007ee6dfa1901b12c58a1028b03a7404638da3c839b236ac9c7374839922b14e78175a9906f53fefe0944a61df8fcbac42e02d9de0a63bfe4375451af9984cf4510a866e97f490141d19eededecc17d25747a0f634459cbd2b4222ba3b7bebdaf63eed03d30dd9ea6a098064b72a45ae9ec6c6d12218b52e3943a2841edfdeb6cfe330b17d042789da5f6bb6d9fb3afbd81ba562295efa99a456ad26951bd2d55f8db6cb219a123ce53cd622bc76b164a78a190cecd722f1260707aeacaf77a54bbadfcedf5078756ccfd5d433885343bf0cfc881a3f568df568f6289bdcd8fec2a60b038a7fbbc7ba09a0b64b7ce9ab12c964769d864a02915481509c3b9eca1a35e919356c3dba4a64170a2fa7c8e9d5da023641339c8e76643ee36b3e564ed0b83ece23976b36482e0e9b729ff3c048aaca5f0e21a7e3e2ff24449c894c82931bbf80a21a3fbcf3897ba036d0fc85c72403fed8f3030639585a497d73dbf040112a2e7422c51db7800f9e2dc8b15887deb704c821e024e0fafd339e15bedd1e49940f4cb05b3ee84a8708372a9e63a45965bd531d3b60ea62fc2d27a967625830328b2c012f7ab1783818fdccb53694fc8912ae8476a91e2447ec1e10d0fe47b3b26640aa67fec477eb69564e682fc9c1a8ca77d8cb3a0968f75ee425ff53fccef4171e3fdad6b3f73b1dcbb449ca65ba023d12484e343a08f1bb9bea4c2eca4477f838c8349111b94a330892d3a9bb76641927456b80a14801927b9088f4f04f8074228cc6a4b6ab283ae2cdd061b6baff844748e410e89008d27073ffa37d32e16addb53195ebffc2a322d06631940204a379eed81e2e4dc220eb24abfcf4be03a59ef405d88059810a73f1883f7df3e953d0bacf61813c13a8b0df17396fd277bdfa0801c0b92b6cccc359b1f1cd3bd774a578aeaeb42d658090842eff6e3ac7fda1e321588ad941caf94f7bcea9f92666d0b8be5abcd4326384d9a7ab6571f05c20887ed0b29e990f1653cf7fc51e94d47f05d8914266fc0a39350538030a8325deaf529589751fd15a1f21d76fa2311d7608c98f2d511dc0399e99a9482c8533c724852371103bae325d4ee3b8d35164df5bc96aa82957e6d270481f548b4533799fcad840871c451aded44801ecd79ab3890abc0dacd3b417bbbca307c1be7a03f3009e2a9956445f5a1f027cd1a98ef117b7c2ea7d406edec1aa70777d1b4a0fb79922824547e1c8a40e71c706f454e92b727c4ccf4cec48da3058f7bcc20cfb3be1078f9fc78648b4af5fd43a3175dfa1ebe4cfed7009560fec551d7ccc899ee535a2383fddac518d09f6136229a0e0b4f96ab0d512cf4", 0x1000}, {&(0x7f0000000c00)="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", 0xfc}, {&(0x7f0000000d00)="a0ea42717c894e69d79b431ef96b0c704bdcfb937f85559076791ee65233f437f9201f1da80c07fd1668b487c9570d6d6fe1990cdb34a3378f8ee514a1fa753c706e4496669c954628b164a409b86f6702b732e191e15dce0305f29c8fee5348a3ab0861d6fbc371e9031e0c8129d8e8310a53c4fb8a7d7d89cf4ceadcbe33a72a32c6423246c7eda53495119200f9ce19283481379fea41d7d0fc108f42e120ace4ed25dc5f54775a85ac2ba974f7d8f41bca859a93e109060f2d41b72c959c1cfe13c1f1fd25a4388c186d8f2926699aafb98e23eafdc6", 0xd8}, {&(0x7f0000000e00)="b2901eb66cc43b8c26154fc568d77730ddcc1a2094ac4ee3c448626e2d4223514f15f64842cb8fd626c3fee0199859927dc296cdf7f4105a87c00e40762da48f12e2860f12ffc7a81c63324466087076974bdd7dea353cc3377ba22ac64915", 0x5f}, {&(0x7f0000000640)="2955d2be47ad61a5c988fd5a128bbfd9bacb149ea691dea471eb2cf2", 0x1c}, {&(0x7f0000000e80)="98f60c6b2500f9ac8a2b3ec32cafcd189f53517541457474e9b706996ea400417ece7ce6c4c69b30dd482ec98c45673f1d2938bd4041be44a563e7cbbd2d8eb9893e18116e934c0a5321f722f14d279dc85d2f340909f8e0615f3d2eadd61571c89aa9b1426acf64a58e088ae62f4859240cd696ba2dd36f92b44ac3e84d0a777540cc547a0910f7ebcdcff8b1f16909", 0x90}], 0x6}}], 0x2, 0x50) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}]}, 0x4) dup3(r5, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e13, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1441.620318][T26954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.628294][T26954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.641044][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1441.865464][T26954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.873701][T26954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.881603][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1441.943278][ T314] binder: 313:314 unknown command 0 [ 1441.948970][ T314] binder: 313:314 ioctl c0306201 200001c0 returned -22 08:30:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1442.653897][ T326] binder: 322:326 unknown command 0 [ 1442.659167][ T326] binder: 322:326 ioctl c0306201 200001c0 returned -22 08:30:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f13, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:48 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) r6 = accept4$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x800) preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000780)=""/164, 0xa4}, {&(0x7f0000000580)=""/13, 0xd}, {&(0x7f0000000840)=""/206, 0xce}, {&(0x7f0000000640)=""/59, 0x3b}], 0x7, 0x6, 0x3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1443.150664][ T342] binder: 335:342 unknown command 0 [ 1443.155973][ T342] binder: 335:342 ioctl c0306201 200001c0 returned -22 [ 1443.701898][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.709815][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.727195][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.735219][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.849069][T18862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1444.306653][ T360] binder: 355:360 unknown command 0 [ 1444.312143][ T360] binder: 355:360 ioctl c0306201 200001c0 returned -22 08:30:50 executing program 5: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 08:30:50 executing program 2: r0 = syz_io_uring_setup(0x7774, &(0x7f0000000540)={0x0, 0xa92c, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r3 = io_uring_setup(0x8050fb, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) io_uring_enter(0xffffffffffffffff, 0x29d, 0x0, 0x0, 0x0, 0xffffffffffffff81) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000100)=""/29, 0x1d}], 0x4) r4 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3, 0x4}, 0x9b1e66637592a756, 0x0, &(0x7f0000000440)={{0x80000001, 0xffe, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0xffff, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x20048891) [ 1444.768925][ T368] binder: 365:368 unknown command 0 [ 1444.774457][ T368] binder: 365:368 ioctl c0306201 200001c0 returned -22 [ 1444.919703][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.927627][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.936662][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:30:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 08:30:51 executing program 2: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x30, r3, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x2, 0xe1, 0x0, 0x80000001, 0x4}, 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000480)="e2ee88225084593c042ea2c8441bc2207b7b5747a9ad36f4e45a808dbb7f90460b5939b58e6cae8d9d585801c5842121f3b62700fa7257e96b123cd5fe720af8b3981efca97e3a1003a651411ddc6984caea699ecccf73cadad1200b382dc12ccbc50de0d380eb2382f953507948d6e39cf43253468f49614f13590e12dfae2422791bd5a14de4907ba5a53a77e8ae89facf4b911de6a431ad09f5f0d87c2334fe68e831e21eb7213db283748398577946061cb424281bd07ef3ee858cce7d57a4d07f23dfc4e4e0e2405b47020c08dc929e9810ed5be949550f35508c9745f65ac6c4ea825651bcb8cd14bec7c623e874014dbefeac", 0xf6, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={r5, 0xa6, &(0x7f0000000780)=""/166}) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r6 = io_uring_setup(0x8050fb, 0x0) r7 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r7, 0xffffffffffffffff, 0x0) ftruncate(r6, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1445.169846][ T379] binder: 378:379 unknown command 0 [ 1445.175153][ T379] binder: 378:379 ioctl c0306201 200001c0 returned -22 08:30:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1445.536997][ T395] binder: 393:395 unknown command 0 [ 1445.542637][ T395] binder: 393:395 ioctl c0306201 200001c0 returned -22 08:30:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630b, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1446.035288][ T400] binder: 399:400 unknown command 0 [ 1446.040972][ T400] binder: 399:400 ioctl c0306201 200001c0 returned -22 08:30:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 08:30:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:52 executing program 2: r0 = syz_io_uring_setup(0x667c, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_setup(0x2e54, &(0x7f0000000180)={0x0, 0xbc90, 0x4, 0x3, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x7, 0xfff, {0x0, r0}, 0x5, 0x1, 0x1, {0x0, 0x0, r3}}, 0xf7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f00000004c0), 0x100000000, 0x121801) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630c, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1446.815466][ T415] binder: 409:415 unknown command 0 [ 1446.821003][ T415] binder: 409:415 ioctl c0306201 200001c0 returned -22 [ 1446.932810][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.940787][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.948635][T26895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:53 executing program 5: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 08:30:53 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630d, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:53 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) [ 1447.619858][ T429] binder: 426:429 unknown command 0 [ 1447.625236][ T429] binder: 426:429 ioctl c0306201 200001c0 returned -22 [ 1448.152259][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.160251][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.168074][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1448.183796][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.191748][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.202202][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:54 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1448.511281][ T445] binder: 443:445 unknown command 0 [ 1448.516618][ T445] binder: 443:445 ioctl c0306201 200001c0 returned -22 08:30:54 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1448.726876][ T452] binder: 451:452 unknown command 0 [ 1448.732465][ T452] binder: 451:452 ioctl c0306201 200001c0 returned -22 08:30:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:30:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1449.884685][ T464] binder: 461:464 unknown command 0 [ 1449.890088][ T464] binder: 461:464 ioctl c0306201 200001c0 returned -22 08:30:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1449.972970][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.981030][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.988930][T18601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:30:56 executing program 5: r0 = syz_io_uring_setup(0x667c, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_setup(0x2e54, &(0x7f0000000180)={0x0, 0xbc90, 0x4, 0x3, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x7, 0xfff, {0x0, r0}, 0x5, 0x1, 0x1, {0x0, 0x0, r3}}, 0xf7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f00000004c0), 0x100000000, 0x121801) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r5 = io_uring_setup(0x8050fb, 0x0) r6 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r6, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) 08:30:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:30:56 executing program 2: r0 = syz_io_uring_setup(0x3775, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xfffffeaf}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x3f) r4 = io_uring_setup(0x8050fb, 0x0) r5 = syz_open_dev$video(0x0, 0xe535, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x9, @win={{0x0, 0x3}, 0x2, 0x0, &(0x7f0000000440)={{0x80000001, 0x1000, 0x3, 0x8}, &(0x7f0000000380)={{0x0, 0x200, 0x0, 0x3}}}, 0x6, &(0x7f0000000900), 0x4}}) dup3(r5, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x3}}, 0x10) ftruncate(r4, 0x401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x3ea0, 0x0, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0xc811) [ 1450.215836][ T473] binder: 472:473 unknown command 0 [ 1450.221425][ T473] binder: 472:473 ioctl c0306201 200001c0 returned -22 08:31:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 08:31:11 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:31:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634040, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:31:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) 08:31:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000002c0)=0xffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, 0xffffffffffffffff) [ 1465.955125][ T487] binder: 485:487 unknown command 0 [ 1465.960569][ T487] binder: 485:487 ioctl c0306201 200001c0 returned -22 08:31:12 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) 08:31:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 08:31:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffff, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1466.475339][ T502] binder: 501:502 unknown command 0 [ 1466.480777][ T502] binder: 501:502 ioctl c0306201 200001c0 returned -22 08:31:12 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1468.546405][ T489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.553705][ T489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.583979][ T489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.681324][ T489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1470.515292][ T489] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.524514][ T489] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.533523][ T489] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.542511][ T489] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.529412][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1531.535796][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1591.600317][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1591.606668][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1651.644537][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz-executor.5:476] [ 1651.653082][ C1] Modules linked in: [ 1651.656963][ C1] irq event stamp: 22347030 [ 1651.661792][ C1] hardirqs last enabled at (22347029): [] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1651.672937][ C1] hardirqs last disabled at (22347030): [] sysvec_apic_timer_interrupt+0xb/0xc0 [ 1651.683529][ C1] softirqs last enabled at (8824276): [] __irq_exit_rcu+0x123/0x180 [ 1651.693221][ C1] softirqs last disabled at (8823377): [] __irq_exit_rcu+0x123/0x180 [ 1651.703471][ C1] CPU: 1 PID: 476 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 1651.711736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.721888][ C1] RIP: 0010:vsnprintf+0x80c/0x14f0 [ 1651.727047][ C1] Code: 89 ea 48 c1 e8 03 83 e2 07 0f b6 04 18 38 d0 0f 8f 4b fa ff ff 84 c0 0f 84 43 fa ff ff 4c 89 ef e8 79 ad c7 fd e9 36 fa ff ff 6f 0a 81 fd 4c 8b 74 24 18 4d 39 f4 73 42 e8 60 0a 81 fd 48 8b [ 1651.746652][ C1] RSP: 0018:ffffc900172076f0 EFLAGS: 00000297 [ 1651.752732][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000008 [ 1651.760692][ C1] RDX: 0000000000000000 RSI: ffff888011883a00 RDI: 0000000000000003 [ 1651.768671][ C1] RBP: ffffffff89dfb500 R08: 0000000000000000 R09: ffffffff83f6b22f [ 1651.776630][ C1] R10: 0000000000000008 R11: 0000000000000000 R12: ffff88806e98e0c4 [ 1651.784605][ C1] R13: ffffffff89dfb50f R14: 0000000000000000 R15: ffffc90017207808 [ 1651.792564][ C1] FS: 00007fba471a5700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1651.801482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.808057][ C1] CR2: 00007fa6c3c6a807 CR3: 0000000084553000 CR4: 00000000003506e0 [ 1651.816020][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1651.823990][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1651.831969][ C1] Call Trace: [ 1651.835266][ C1] [ 1651.838194][ C1] ? pointer+0xa00/0xa00 [ 1651.842431][ C1] ? pointer+0xa00/0xa00 [ 1651.846686][ C1] seq_printf+0x195/0x240 [ 1651.851007][ C1] ? seq_dentry+0x2a0/0x2a0 [ 1651.855505][ C1] ? down_read+0x198/0x440 [ 1651.859931][ C1] ? mark_held_locks+0x9f/0xe0 [ 1651.864685][ C1] ? crypto_aead_report+0x1d0/0x1d0 [ 1651.869952][ C1] crypto_aead_show+0x84/0x170 [ 1651.874736][ C1] c_show+0x281/0x4a0 [ 1651.878832][ C1] traverse.part.0+0xcf/0x5f0 [ 1651.883611][ C1] ? seq_read_iter+0x8d6/0x1240 [ 1651.888644][ C1] ? seq_read_iter+0x8e4/0x1240 [ 1651.893526][ C1] seq_read_iter+0x8f9/0x1240 [ 1651.898206][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1651.904456][ C1] ? apparmor_file_permission+0x264/0x4e0 [ 1651.910192][ C1] proc_reg_read_iter+0x1fb/0x2d0 [ 1651.915210][ C1] ? proc_reg_get_unmapped_area+0x3f0/0x3f0 [ 1651.921098][ C1] io_read+0x33c/0xff0 [ 1651.925163][ C1] ? kiocb_done+0xb90/0xb90 [ 1651.929672][ C1] ? find_held_lock+0x2d/0x110 [ 1651.934427][ C1] ? io_wqe_enqueue+0x45e/0xbc0 [ 1651.939261][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1651.944096][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1651.948937][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 1651.953866][ C1] io_issue_sqe+0x800/0x7010 [ 1651.958449][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1651.964690][ C1] ? io_wqe_enqueue+0x234/0xbc0 [ 1651.969525][ C1] ? create_io_worker+0x580/0x580 [ 1651.974549][ C1] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1651.980438][ C1] ? io_openat2+0xb50/0xb50 [ 1651.984935][ C1] ? io_queue_async_work+0x28b/0x5d0 [ 1651.990210][ C1] ? __sanitizer_cov_trace_switch+0xbb/0xf0 [ 1651.996096][ C1] io_req_task_submit+0xce/0x450 [ 1652.001036][ C1] tctx_task_work+0x1b3/0x630 [ 1652.005709][ C1] ? __io_submit_flush_completions+0x2c0/0x2c0 [ 1652.011859][ C1] task_work_run+0xdd/0x1a0 [ 1652.016359][ C1] exit_to_user_mode_prepare+0x256/0x290 [ 1652.021984][ C1] syscall_exit_to_user_mode+0x19/0x60 [ 1652.027444][ C1] do_syscall_64+0x42/0xb0 [ 1652.031859][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1652.037748][ C1] RIP: 0033:0x7fba49c2fae9 [ 1652.042165][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.061764][ C1] RSP: 002b:00007fba471a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1652.070171][ C1] RAX: 0000000000003ea0 RBX: 00007fba49d42f60 RCX: 00007fba49c2fae9 [ 1652.078131][ C1] RDX: 0000000000000000 RSI: 0000000000003ea0 RDI: 0000000000000003 [ 1652.086093][ C1] RBP: 00007fba49c89f25 R08: 0000000000000000 R09: 0000000000000000 [ 1652.094053][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1652.102020][ C1] R13: 00007fba4a276b2f R14: 00007fba471a5300 R15: 0000000000022000 [ 1652.110013][ C1] [ 1652.113019][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1652.118222][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x1c6/0x250 [ 1652.119208][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 1652.134525][ C1] CPU: 1 PID: 476 Comm: syz-executor.5 Tainted: G L 5.15.0-syzkaller #0 [ 1652.144239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.154283][ C1] Call Trace: [ 1652.157550][ C1] [ 1652.160380][ C1] dump_stack_lvl+0xcd/0x134 [ 1652.165132][ C1] panic+0x2b0/0x6dd [ 1652.169128][ C1] ? __warn_printk+0xf3/0xf3 [ 1652.173711][ C1] ? native_safe_apic_wait_icr_idle+0x65/0x90 [ 1652.179825][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 1652.185286][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 1652.190492][ C1] ? softlockup_fn+0xa0/0xa0 [ 1652.195098][ C1] __hrtimer_run_queues+0x1c0/0xe50 [ 1652.200293][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1652.206264][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 1652.212329][ C1] hrtimer_interrupt+0x31c/0x790 [ 1652.217267][ C1] __sysvec_apic_timer_interrupt+0x146/0x530 [ 1652.223238][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 1652.228871][ C1] [ 1652.231803][ C1] [ 1652.234729][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1652.240709][ C1] RIP: 0010:vsnprintf+0x80c/0x14f0 [ 1652.245836][ C1] Code: 89 ea 48 c1 e8 03 83 e2 07 0f b6 04 18 38 d0 0f 8f 4b fa ff ff 84 c0 0f 84 43 fa ff ff 4c 89 ef e8 79 ad c7 fd e9 36 fa ff ff 6f 0a 81 fd 4c 8b 74 24 18 4d 39 f4 73 42 e8 60 0a 81 fd 48 8b [ 1652.265428][ C1] RSP: 0018:ffffc900172076f0 EFLAGS: 00000297 [ 1652.271480][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000008 [ 1652.279435][ C1] RDX: 0000000000000000 RSI: ffff888011883a00 RDI: 0000000000000003 [ 1652.287388][ C1] RBP: ffffffff89dfb500 R08: 0000000000000000 R09: ffffffff83f6b22f [ 1652.295339][ C1] R10: 0000000000000008 R11: 0000000000000000 R12: ffff88806e98e0c4 [ 1652.303293][ C1] R13: ffffffff89dfb50f R14: 0000000000000000 R15: ffffc90017207808 [ 1652.311251][ C1] ? vsnprintf+0x17f/0x14f0 [ 1652.315753][ C1] ? pointer+0xa00/0xa00 [ 1652.319982][ C1] ? pointer+0xa00/0xa00 [ 1652.324209][ C1] seq_printf+0x195/0x240 [ 1652.328530][ C1] ? seq_dentry+0x2a0/0x2a0 [ 1652.333025][ C1] ? down_read+0x198/0x440 [ 1652.337426][ C1] ? mark_held_locks+0x9f/0xe0 [ 1652.342182][ C1] ? crypto_aead_report+0x1d0/0x1d0 [ 1652.347366][ C1] crypto_aead_show+0x84/0x170 [ 1652.352116][ C1] c_show+0x281/0x4a0 [ 1652.356083][ C1] traverse.part.0+0xcf/0x5f0 [ 1652.360767][ C1] ? seq_read_iter+0x8d6/0x1240 [ 1652.365631][ C1] ? seq_read_iter+0x8e4/0x1240 [ 1652.370473][ C1] seq_read_iter+0x8f9/0x1240 [ 1652.375138][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1652.381368][ C1] ? apparmor_file_permission+0x264/0x4e0 [ 1652.387113][ C1] proc_reg_read_iter+0x1fb/0x2d0 [ 1652.392125][ C1] ? proc_reg_get_unmapped_area+0x3f0/0x3f0 [ 1652.398001][ C1] io_read+0x33c/0xff0 [ 1652.402057][ C1] ? kiocb_done+0xb90/0xb90 [ 1652.406549][ C1] ? find_held_lock+0x2d/0x110 [ 1652.411300][ C1] ? io_wqe_enqueue+0x45e/0xbc0 [ 1652.416150][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1652.420987][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1652.425823][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 1652.430746][ C1] io_issue_sqe+0x800/0x7010 [ 1652.435325][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1652.441573][ C1] ? io_wqe_enqueue+0x234/0xbc0 [ 1652.446406][ C1] ? create_io_worker+0x580/0x580 [ 1652.451410][ C1] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1652.457290][ C1] ? io_openat2+0xb50/0xb50 [ 1652.461792][ C1] ? io_queue_async_work+0x28b/0x5d0 [ 1652.467061][ C1] ? __sanitizer_cov_trace_switch+0xbb/0xf0 [ 1652.472943][ C1] io_req_task_submit+0xce/0x450 [ 1652.477956][ C1] tctx_task_work+0x1b3/0x630 [ 1652.482622][ C1] ? __io_submit_flush_completions+0x2c0/0x2c0 [ 1652.488766][ C1] task_work_run+0xdd/0x1a0 [ 1652.493256][ C1] exit_to_user_mode_prepare+0x256/0x290 [ 1652.498875][ C1] syscall_exit_to_user_mode+0x19/0x60 [ 1652.504318][ C1] do_syscall_64+0x42/0xb0 [ 1652.508733][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1652.514610][ C1] RIP: 0033:0x7fba49c2fae9 [ 1652.519011][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.538772][ C1] RSP: 002b:00007fba471a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1652.547169][ C1] RAX: 0000000000003ea0 RBX: 00007fba49d42f60 RCX: 00007fba49c2fae9 [ 1652.555137][ C1] RDX: 0000000000000000 RSI: 0000000000003ea0 RDI: 0000000000000003 [ 1652.563102][ C1] RBP: 00007fba49c89f25 R08: 0000000000000000 R09: 0000000000000000 [ 1652.571067][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1652.579191][ C1] R13: 00007fba4a276b2f R14: 00007fba471a5300 R15: 0000000000022000 [ 1652.587243][ C1] [ 1652.590679][ C1] Kernel Offset: disabled [ 1652.595004][ C1] Rebooting in 86400 seconds..