ev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x2, &(0x7f00000002c0)) 21:16:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x6, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000540)={@multicast2, @broadcast, @loopback}, 0xc) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/35, 0x23}, {&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000400)=""/21, 0x15}], 0x6, &(0x7f00000004c0)=""/19, 0x13}, 0x40010106) recvmsg$can_j1939(r2, &(0x7f0000001ac0)={&(0x7f0000000680)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000700)=""/36, 0x24}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x5, &(0x7f00000019c0)=""/230, 0xe6}, 0x2) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd=0xffffffffffffffff, 0x1}) prctl$PR_GET_NO_NEW_PRIVS(0x27) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) io_uring_setup(0x150f, &(0x7f0000000600)={0x0, 0x6e47, 0x2, 0x2, 0x3c}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000002c0)={0x7, 0x6, 0x4, 0x0, 0x400, {0x77359400}, {0x4, 0xc, 0x8, 0x1, 0x2, 0x7, "98ea43e0"}, 0xa8, 0x2, @fd=r5, 0x7, 0x0, r6}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x5, &(0x7f00000004c0)) 21:16:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b40)={0x0, @dev, @multicast2}, &(0x7f0000002b80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', r2, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000540)={@multicast2, @broadcast, @loopback}, 0xc) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/35, 0x23}, {&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000400)=""/21, 0x15}], 0x6, &(0x7f00000004c0)=""/19, 0x13}, 0x40010106) recvmsg$can_j1939(r2, &(0x7f0000001ac0)={&(0x7f0000000680)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000700)=""/36, 0x24}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x5, &(0x7f00000019c0)=""/230, 0xe6}, 0x2) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:04 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) clock_gettime(0x2, &(0x7f00000002c0)) 21:16:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd=0xffffffffffffffff, 0x1}) prctl$PR_GET_NO_NEW_PRIVS(0x27) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) io_uring_setup(0x150f, &(0x7f0000000600)={0x0, 0x6e47, 0x2, 0x2, 0x3c}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000002c0)={0x7, 0x6, 0x4, 0x0, 0x400, {0x77359400}, {0x4, 0xc, 0x8, 0x1, 0x2, 0x7, "98ea43e0"}, 0xa8, 0x2, @fd=r5, 0x7, 0x0, r6}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) 21:16:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b40)={0x0, @dev, @multicast2}, &(0x7f0000002b80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', r2, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x2, &(0x7f00000002c0)) 21:16:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000540)={@multicast2, @broadcast, @loopback}, 0xc) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/35, 0x23}, {&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000400)=""/21, 0x15}], 0x6, &(0x7f00000004c0)=""/19, 0x13}, 0x40010106) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b40)={0x0, @dev, @multicast2}, &(0x7f0000002b80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', r2, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:04 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd=0xffffffffffffffff, 0x1}) prctl$PR_GET_NO_NEW_PRIVS(0x27) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) io_uring_setup(0x150f, &(0x7f0000000600)={0x0, 0x6e47, 0x2, 0x2, 0x3c}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000002c0)={0x7, 0x6, 0x4, 0x0, 0x400, {0x77359400}, {0x4, 0xc, 0x8, 0x1, 0x2, 0x7, "98ea43e0"}, 0xa8, 0x2, @fd=r5, 0x7, 0x0, r6}) 21:16:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 1: clock_gettime(0x2, &(0x7f00000002c0)) 21:16:04 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000540)={@multicast2, @broadcast, @loopback}, 0xc) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b40)={0x0, @dev, @multicast2}, &(0x7f0000002b80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', r2, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:04 executing program 1: clock_gettime(0x0, &(0x7f00000002c0)) 21:16:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd, 0x1}) prctl$PR_GET_NO_NEW_PRIVS(0x27) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) io_uring_setup(0x150f, &(0x7f0000000600)={0x0, 0x6e47, 0x2, 0x2, 0x3c}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) 21:16:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 1: clock_gettime(0x0, &(0x7f00000002c0)) 21:16:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 1: clock_gettime(0x0, &(0x7f00000002c0)) 21:16:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd, 0x1}) prctl$PR_GET_NO_NEW_PRIVS(0x27) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) io_uring_setup(0x150f, &(0x7f0000000600)={0x0, 0x6e47, 0x2, 0x2, 0x3c}) 21:16:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 1: clock_gettime(0x2, 0x0) 21:16:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:05 executing program 1: clock_gettime(0x2, 0x0) 21:16:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd, 0x1}) prctl$PR_GET_NO_NEW_PRIVS(0x27) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) 21:16:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:05 executing program 1: clock_gettime(0x2, 0x0) 21:16:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd, 0x1}) prctl$PR_GET_NO_NEW_PRIVS(0x27) 21:16:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc039f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd, 0x1}) prctl$PR_GET_NO_NEW_PRIVS(0x27) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) 21:16:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0xc0f, 0x0, 0x4, 0x40, 0x1, {r2, r3/1000+10000}, {0x3, 0x2, 0xff, 0x4, 0x8, 0x20, "fe4794d7"}, 0x40, 0x0, @fd, 0x1}) 21:16:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc059f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:05 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc039f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc0d9f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r1, 0x9, 0x1, 0x7189, 0x8, 0x1, {0x2}}, 0x7) 21:16:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x101, 0x81, 0x2, 0x515, 0x1, 0x8, 0x3ff}, &(0x7f0000000380)={0x2, 0x40, 0x55, 0x5, 0x4, 0xfff, 0x6, 0x4}, &(0x7f00000003c0)={0x200000000000, 0x4, 0x72c, 0x7, 0x6, 0x7, 0x148d, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc109f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f5c"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x5, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:06 executing program 0: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 0: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8f, 0x5f76e73a, 0x22, @private2={0xfc, 0x2, [], 0x3}, @remote, 0x10, 0x7800, 0x200000, 0x4}}) 21:16:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x2, 0x0, @planes=0x0}) 21:16:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 21:16:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3, 0x0, @planes=0x0}) 21:16:06 executing program 0: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 21:16:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x4, 0x0, @planes=0x0}) 21:16:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 21:16:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x5, 0x0, @planes=0x0}) 21:16:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:06 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x8000000) 21:16:06 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000002c40)={'ip6tnl0\x00', 0x0}) 21:16:06 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x8000000) 21:16:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x6, 0x0, @planes=0x0}) 21:16:06 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:06 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:07 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x8000000) 21:16:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:07 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x7, 0x0, @planes=0x0}) 21:16:07 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x3ff, 0x0, 0x200a, 0x4, 0x7, {0x8, 0x80}, 0x1}) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) 21:16:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x8, 0x0, @planes=0x0}) 21:16:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x482d, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:07 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:07 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:07 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:07 executing program 1: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x300, 0x0, @planes=0x0}) 21:16:07 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) 21:16:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:07 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x7, 0x0, @planes=0x0}) 21:16:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x500, 0x0, @planes=0x0}) 21:16:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x8000000) 21:16:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:07 executing program 1: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000140)={0x8, 0x7, "bb6e7b28293e4a02c5997f5ee4d226ab3b37ecc4836a34ce53f989f9ff9adcec", 0x7, 0x81, 0x7, 0x3f}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x9018, 0x7, "24ca0a2eb708e182c21a95b31f8c0dc02d2e343ea89599d7feaf60bad53056dc", 0x3, 0x1, 0xa0, 0x0, 0x10}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x2, 0x0) 21:16:07 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 21:16:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x600, 0x0, @planes=0x0}) 21:16:07 executing program 1: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:07 executing program 5: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5452, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x80) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x8, 0x2, 0x4, 0x70000, 0x10001, {0x77359400}, {0x5, 0x2, 0x0, 0x1, 0x8, 0xf, "361bfe5b"}, 0x200, 0x1, @fd=r0, 0xfffffff9}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x40000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000680)='/dev/audio#\x00', 0x8, 0x284c0) io_submit(0x0, 0x6, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000140)="5451c52eafd2b16308d1159c8d6ae62acc7a5f35eaee537af56b544735af8adf0b11de", 0x23, 0x54b2, 0x0, 0x0, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000200)="082edb2e67650569185a8aa28020976d3bed17669a7fb9cebe13bdbfdc7ede5a7ceae91dc769657bb063f59e59eb97a42c78d76c678982a93edf58fa7020cb5959eea168e75e9d3b7ccb99c5cd49490d5a97e33f5accef9aaf64c98855989a46b362cccaf48bcb903b60fed9fd4e1ccf5e05e5e18ac6f712b88abe0cc0c20db33bea302b1cfd934ca20ccd24f3bdb5f6ccf920296e109fa1ef5d92e84cfb709b79195d2ac6d193f7e8d1ac1dddc69a5f419e22e5ca711cb88f134d4b807195288043de0f4fa210cf83bda5419dce83398c0300d7e6d5dffeeac4b9180a51ee5912e35de9ffb3232a02855be58e65871f7072b1428585d720", 0xf8, 0x8, 0x0, 0x2, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x3e1, r4, &(0x7f0000000340)="1aea7d50569c789e3621f861761814cfd52cb073a1fbd040a4995c15522b606c1b3765", 0x23, 0x3f, 0x0, 0x2, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000003c0)="b715008787a3f4e924044528e0addb2f6277da1c7de149628bfb1afa72797155b6d5f73585dff701b82579f809776f639c5461fc64b1f673204dc030cb4d77cc47bd9903ea98a528a2bbca3633f22e0857cf0b0098fa59bf3cde316b89265f434a7a64f192", 0x65, 0x2, 0x0, 0x3, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000480)="1a43f39ef1ffa0ff6d92b9b3e664195a8f06254d54db327cb464ca7ba942392e856edb96663ee13beb7a53c2e54121e8de919caa11d3e04ae2970c261258eeb5cf866eb5b0247b531da78fb9a3ad984581f1c38b54efcfd3872ebdb0fa56d0dd1783c57336896343ad519f93e590217814feb17911085e970324a6a2624dc3ec56a75390ded13f06defc97b433b74fbb68af9a9ab770820ad6b089b3e3b1c9678ae6682ae5c7b1c80d37bb21ae5e5b5e55a8bb388db05de057ff5348fe94", 0xbe, 0x5, 0x0, 0x1, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x11, r1, &(0x7f0000000580)="38ffb1cb511f53e53230b8ce0604c23f232a0135e583d2c95e6fe5d2ec847cae9591cc9e0b74ea48766075d58fcfcb7219039658b9079f652b87b54a1ca4db654f5a2c2f6963767725807f7e47177c00f8ba9bd2bd131809b5248ec6b7092dd174eaa2c974d07ee092c294831c91b8f45ee5602f2f7a62b8eafc592b3b71ce42f89eb9a99fa9713ea6d6e88d2007b4994ac93ec9068983ef2d13804f3eb8d238fef5e747fba9d83e8207c0ab153760aa7e71cdd84f77c4ab705e19d7029fe215201b33e1343c5ded6600ee36b4c5cd2668c01df254f342", 0xd7, 0x56e2, 0x0, 0x2, r6}]) 21:16:07 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x700, 0x0, @planes=0x0}) 21:16:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 21:16:07 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000040)) 21:16:07 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xff00, 0x0, @planes=0x0}) 21:16:07 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 21:16:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:08 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:08 executing program 0: syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x2, 0xfffffff2, 0x2011, 0x2, 0x2, 0x0, 0x3}}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0xffff, 0x2, 0x4, 0x2000, 0x8000, {}, {0x2, 0xc, 0x26, 0x5, 0x3, 0x9, "a6246358"}, 0x200, 0x3, @offset=0x1, 0x4}) 21:16:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x1000000, 0x0, @planes=0x0}) 21:16:08 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc039f61"}, 0x0, 0x0, @planes=0x0}) 21:16:08 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x2000000, 0x0, @planes=0x0}) 21:16:08 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc059f61"}, 0x0, 0x0, @planes=0x0}) 21:16:08 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) 21:16:08 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc0d9f61"}, 0x0, 0x0, @planes=0x0}) 21:16:08 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3000000, 0x0, @planes=0x0}) 21:16:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) 21:16:08 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x227d, 0x44300) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x7f, 0x101, "6cde855ac29e43a1cb31c1b7c9302b3b95a70e1bb4b7c485698981b90bd1f22f", 0x80000001, 0x2, 0x5, 0x8, 0x40}) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc109f61"}, 0x0, 0x0, @planes=0x0}) 21:16:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) 21:16:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x4000000, 0x0, @planes=0x0}) 21:16:08 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x227d, 0x44300) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x7f, 0x101, "6cde855ac29e43a1cb31c1b7c9302b3b95a70e1bb4b7c485698981b90bd1f22f", 0x80000001, 0x2, 0x5, 0x8, 0x40}) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f5c"}, 0x0, 0x0, @planes=0x0}) 21:16:08 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) 21:16:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x5000000, 0x0, @planes=0x0}) 21:16:08 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x227d, 0x44300) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x7f, 0x101, "6cde855ac29e43a1cb31c1b7c9302b3b95a70e1bb4b7c485698981b90bd1f22f", 0x80000001, 0x2, 0x5, 0x8, 0x40}) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:08 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) 21:16:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x6000000, 0x0, @planes=0x0}) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x2, 0x0, @planes=0x0}) 21:16:08 executing program 5: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:08 executing program 1: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x227d, 0x44300) 21:16:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3, 0x0, @planes=0x0}) 21:16:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x7000000, 0x0, @planes=0x0}) 21:16:09 executing program 5: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:09 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x227d, 0x44300) 21:16:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) 21:16:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x4, 0x0, @planes=0x0}) 21:16:09 executing program 5: syz_io_uring_setup(0x1b4, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x8000000, 0x0, @planes=0x0}) 21:16:09 executing program 0: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x227d, 0x44300) 21:16:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x5, 0x0, @planes=0x0}) 21:16:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) 21:16:09 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3a8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xfdfdffff, 0x0, @planes=0x0}) 21:16:09 executing program 0: syz_open_dev$audion(0x0, 0x227d, 0x44300) 21:16:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x6, 0x0, @planes=0x0}) 21:16:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xff000000, 0x0, @planes=0x0}) 21:16:09 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 21:16:09 executing program 0: syz_open_dev$audion(0x0, 0x227d, 0x44300) 21:16:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) 21:16:09 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x7, 0x0, @planes=0x0}) 21:16:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xfffffdfd, 0x0, @planes=0x0}) 21:16:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x5) 21:16:09 executing program 0: syz_open_dev$audion(0x0, 0x227d, 0x44300) 21:16:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x8, 0x0, @planes=0x0}) 21:16:09 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:09 executing program 0: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x44300) 21:16:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x5) 21:16:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x300, 0x0, @planes=0x0}) 21:16:09 executing program 0: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) 21:16:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:09 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:09 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x500, 0x0, @planes=0x0}) 21:16:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2, @planes=0x0}) 21:16:09 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:09 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:09 executing program 0: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) 21:16:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x600, 0x0, @planes=0x0}) 21:16:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:10 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x3, @planes=0x0}) 21:16:10 executing program 0: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) 21:16:10 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x5) 21:16:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x700, 0x0, @planes=0x0}) 21:16:10 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x4, @planes=0x0}) 21:16:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xff00, 0x0, @planes=0x0}) 21:16:10 executing program 5: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:10 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000600), 0x0) 21:16:10 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x5) 21:16:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x5, @planes=0x0}) 21:16:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x1000000, 0x0, @planes=0x0}) 21:16:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x5) 21:16:10 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 0: syz_io_uring_setup(0x1b4, &(0x7f0000000580), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000640)) 21:16:10 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x6, @planes=0x0}) 21:16:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x5) 21:16:10 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x2000000, 0x0, @planes=0x0}) 21:16:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x100, 0x0, [], {0x0, @reserved}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:10 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3000000, 0x0, @planes=0x0}) 21:16:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x7, @planes=0x0}) 21:16:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x5) 21:16:10 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x2, 0x0, @planes=0x0}) 21:16:10 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x4000000, 0x0, @planes=0x0}) 21:16:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x8, @planes=0x0}) 21:16:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:10 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) 21:16:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000001c0)={0x0, 0x1ff0000, 0x8, [], &(0x7f0000000180)=0x9}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x7ff, 0x1, 0x0, 0x1, 0xb8f7, 0x5, 0xffff, 0x200, 0x5a, 0x10001, 0x5, 0x78eb, 0x8, 0x1, 0x10, 0x6, {0x8001, 0x40}, 0x5, 0x40}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) 21:16:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x5000000, 0x0, @planes=0x0}) 21:16:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x300, @planes=0x0}) 21:16:10 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000040)) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5450, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x200, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000480)={0x8, 0x9, 0x4, 0x804, 0x7fffffff, {}, {0x3, 0x8, 0xff, 0x2, 0x81, 0x4, "bb8a97f6"}, 0x9, 0x1, @userptr=0x101, 0x932, 0x0, r2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000002c0)={0x0, 0x0, {0x0, 0x8b, 0x2011, 0x8, 0x1, 0x3, 0x2, 0x5}}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000380)={0x0, 0x0, 0x1003, 0x81, 0x7, {0x6, 0x10000}}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x8200, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000240)={0x3, 0xa, 0x4, 0x1000, 0x9, {r6, r7/1000+60000}, {0x1, 0x8, 0x3, 0x1, 0x24, 0x2, "2d88b0dc"}, 0x2, 0x2, @offset=0x9, 0x5be, 0x0, r8}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000340)={0x3, 0x2, 0x7, {0x3, 0xffff8001, 0x8, 0x5}}) 21:16:10 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000080)) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:11 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:11 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x500, @planes=0x0}) 21:16:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x6000000, 0x0, @planes=0x0}) 21:16:11 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x600, @planes=0x0}) 21:16:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x5) 21:16:11 executing program 2: io_uring_setup(0x7343, &(0x7f0000000140)={0x0, 0x8cb7, 0x0, 0x3, 0x185}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000002c0)={0x5, 0x3, 0x4, 0x10000, 0x7e9, {0x77359400}, {0x1, 0xc, 0xc1, 0x7f, 0x71, 0xff, "96eaddc1"}, 0xf91, 0x4, @offset=0x1, 0x755, 0x0, r5}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000001c0)={0x0, 0x1, 0x2013}) 21:16:11 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000080)) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x7000000, 0x0, @planes=0x0}) 21:16:11 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:11 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:11 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x700, @planes=0x0}) 21:16:11 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000080)) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:11 executing program 2: io_uring_setup(0x7343, &(0x7f0000000140)={0x0, 0x8cb7, 0x0, 0x3, 0x185}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000002c0)={0x5, 0x3, 0x4, 0x10000, 0x7e9, {0x77359400}, {0x1, 0xc, 0xc1, 0x7f, 0x71, 0xff, "96eaddc1"}, 0xf91, 0x4, @offset=0x1, 0x755, 0x0, r5}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000001c0)={0x0, 0x1, 0x2013}) 21:16:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x8000000, 0x0, @planes=0x0}) 21:16:11 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:11 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:11 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xff00, @planes=0x0}) 21:16:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xfdfdffff, 0x0, @planes=0x0}) 21:16:11 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:11 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) 21:16:11 executing program 2: io_uring_setup(0x7343, &(0x7f0000000140)={0x0, 0x8cb7, 0x0, 0x3, 0x185}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000002c0)={0x5, 0x3, 0x4, 0x10000, 0x7e9, {0x77359400}, {0x1, 0xc, 0xc1, 0x7f, 0x71, 0xff, "96eaddc1"}, 0xf91, 0x4, @offset=0x1, 0x755, 0x0, r5}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000001c0)={0x0, 0x1, 0x2013}) 21:16:11 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:11 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) 21:16:11 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x1000000, @planes=0x0}) 21:16:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xff000000, 0x0, @planes=0x0}) 21:16:11 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 21:16:11 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:11 executing program 1: getrusage(0xffffffffffffffff, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) 21:16:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xfffffdfd, 0x0, @planes=0x0}) 21:16:11 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2000000, @planes=0x0}) 21:16:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x0, 0x8000000, {r2, r3/1000+60000}, {0x3, 0xc, 0x3a, 0x7f, 0x1, 0x6, "f4c17951"}, 0x2, 0x3, @planes=&(0x7f0000000140)={0x401, 0x6, @userptr=0x1000, 0xff}, 0x3f}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) epoll_create1(0x80000) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) 21:16:11 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000080)) 21:16:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x0, 0x8000000, {r2, r3/1000+60000}, {0x3, 0xc, 0x3a, 0x7f, 0x1, 0x6, "f4c17951"}, 0x2, 0x3, @planes=&(0x7f0000000140)={0x401, 0x6, @userptr=0x1000, 0xff}, 0x3f}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) epoll_create1(0x80000) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) 21:16:11 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:11 executing program 0: getrusage(0x0, &(0x7f0000000080)) 21:16:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x2, 0x102, 0x2, {0x100, 0x4, 0x6, 0x1000}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) setgid(0xffffffffffffffff) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) 21:16:11 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x3000000, @planes=0x0}) 21:16:11 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) 21:16:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r4, 0xe8, "94169330676a4c882989c54e42d1e082efac08dac96c28e8ccfe3a6b23625a6760e9c33d00e9c1f6b479e6c922b199dd8acc185156a0a4102c1779e2b102ebf633f1341e158c7f7c4c6790933e0bae5d854014c11a42887fbf9c52ae9789eb963849ac1803586c89650f07c3d5a680a861d70140b8415203211fa1adb44fe65003e8aafcb4fee47d9a2d63f25645a7ba3ea122fa0dfbe3d097d054cb932803463bdb1e1100222fbf6175a03f6793b963dea7eb86f21f2ec0b838056eff9159ec683cc41e5a63112b5d752a8ab2e7f273e7ab86227da3c05472098cd06bba94ee6cbed8e1f2c708ba"}, &(0x7f0000000400)=0xf0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x3, 0x8, 0x2, 0x0, 0x5, 0x8, 0x2, 0x1f, 0xfffffffe, 0xffffffff, 0xae, 0xaf, 0x4, 0x4, 0x3, 0xee46, 0xc50, 0x3, 0x2, 0x1000, 0x81, 0x0, 0x1, 0x1, 0x10001, 0x7, 0x7fff, 0x1, 0x2, 0x80000000, 0x7ff, 0x4]}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x541b, 0x0) 21:16:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2, @planes=0x0}) 21:16:11 executing program 0: getrusage(0x0, &(0x7f0000000080)) 21:16:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x4000000, @planes=0x0}) 21:16:12 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x2, 0x102, 0x2, {0x100, 0x4, 0x6, 0x1000}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) setgid(0xffffffffffffffff) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) 21:16:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x3, @planes=0x0}) 21:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r4, 0xe8, "94169330676a4c882989c54e42d1e082efac08dac96c28e8ccfe3a6b23625a6760e9c33d00e9c1f6b479e6c922b199dd8acc185156a0a4102c1779e2b102ebf633f1341e158c7f7c4c6790933e0bae5d854014c11a42887fbf9c52ae9789eb963849ac1803586c89650f07c3d5a680a861d70140b8415203211fa1adb44fe65003e8aafcb4fee47d9a2d63f25645a7ba3ea122fa0dfbe3d097d054cb932803463bdb1e1100222fbf6175a03f6793b963dea7eb86f21f2ec0b838056eff9159ec683cc41e5a63112b5d752a8ab2e7f273e7ab86227da3c05472098cd06bba94ee6cbed8e1f2c708ba"}, &(0x7f0000000400)=0xf0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x3, 0x8, 0x2, 0x0, 0x5, 0x8, 0x2, 0x1f, 0xfffffffe, 0xffffffff, 0xae, 0xaf, 0x4, 0x4, 0x3, 0xee46, 0xc50, 0x3, 0x2, 0x1000, 0x81, 0x0, 0x1, 0x1, 0x10001, 0x7, 0x7fff, 0x1, 0x2, 0x80000000, 0x7ff, 0x4]}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x541b, 0x0) 21:16:12 executing program 0: getrusage(0x0, &(0x7f0000000080)) 21:16:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x5000000, @planes=0x0}) 21:16:12 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r4, 0xe8, "94169330676a4c882989c54e42d1e082efac08dac96c28e8ccfe3a6b23625a6760e9c33d00e9c1f6b479e6c922b199dd8acc185156a0a4102c1779e2b102ebf633f1341e158c7f7c4c6790933e0bae5d854014c11a42887fbf9c52ae9789eb963849ac1803586c89650f07c3d5a680a861d70140b8415203211fa1adb44fe65003e8aafcb4fee47d9a2d63f25645a7ba3ea122fa0dfbe3d097d054cb932803463bdb1e1100222fbf6175a03f6793b963dea7eb86f21f2ec0b838056eff9159ec683cc41e5a63112b5d752a8ab2e7f273e7ab86227da3c05472098cd06bba94ee6cbed8e1f2c708ba"}, &(0x7f0000000400)=0xf0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x3, 0x8, 0x2, 0x0, 0x5, 0x8, 0x2, 0x1f, 0xfffffffe, 0xffffffff, 0xae, 0xaf, 0x4, 0x4, 0x3, 0xee46, 0xc50, 0x3, 0x2, 0x1000, 0x81, 0x0, 0x1, 0x1, 0x10001, 0x7, 0x7fff, 0x1, 0x2, 0x80000000, 0x7ff, 0x4]}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x541b, 0x0) 21:16:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x4, @planes=0x0}) 21:16:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x2, 0x102, 0x2, {0x100, 0x4, 0x6, 0x1000}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) setgid(0xffffffffffffffff) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) 21:16:12 executing program 0: getrusage(0xffffffffffffffff, 0x0) 21:16:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x6000000, @planes=0x0}) 21:16:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x5, @planes=0x0}) 21:16:12 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 21:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r4, 0xe8, "94169330676a4c882989c54e42d1e082efac08dac96c28e8ccfe3a6b23625a6760e9c33d00e9c1f6b479e6c922b199dd8acc185156a0a4102c1779e2b102ebf633f1341e158c7f7c4c6790933e0bae5d854014c11a42887fbf9c52ae9789eb963849ac1803586c89650f07c3d5a680a861d70140b8415203211fa1adb44fe65003e8aafcb4fee47d9a2d63f25645a7ba3ea122fa0dfbe3d097d054cb932803463bdb1e1100222fbf6175a03f6793b963dea7eb86f21f2ec0b838056eff9159ec683cc41e5a63112b5d752a8ab2e7f273e7ab86227da3c05472098cd06bba94ee6cbed8e1f2c708ba"}, &(0x7f0000000400)=0xf0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x3, 0x8, 0x2, 0x0, 0x5, 0x8, 0x2, 0x1f, 0xfffffffe, 0xffffffff, 0xae, 0xaf, 0x4, 0x4, 0x3, 0xee46, 0xc50, 0x3, 0x2, 0x1000, 0x81, 0x0, 0x1, 0x1, 0x10001, 0x7, 0x7fff, 0x1, 0x2, 0x80000000, 0x7ff, 0x4]}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x541b, 0x0) 21:16:12 executing program 0: getrusage(0xffffffffffffffff, 0x0) 21:16:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x2, 0x102, 0x2, {0x100, 0x4, 0x6, 0x1000}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) setgid(0xffffffffffffffff) 21:16:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x7000000, @planes=0x0}) 21:16:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x6, @planes=0x0}) 21:16:12 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) 21:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000300)={r3, 0xe8, "94169330676a4c882989c54e42d1e082efac08dac96c28e8ccfe3a6b23625a6760e9c33d00e9c1f6b479e6c922b199dd8acc185156a0a4102c1779e2b102ebf633f1341e158c7f7c4c6790933e0bae5d854014c11a42887fbf9c52ae9789eb963849ac1803586c89650f07c3d5a680a861d70140b8415203211fa1adb44fe65003e8aafcb4fee47d9a2d63f25645a7ba3ea122fa0dfbe3d097d054cb932803463bdb1e1100222fbf6175a03f6793b963dea7eb86f21f2ec0b838056eff9159ec683cc41e5a63112b5d752a8ab2e7f273e7ab86227da3c05472098cd06bba94ee6cbed8e1f2c708ba"}, &(0x7f0000000400)=0xf0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x3, 0x8, 0x2, 0x0, 0x5, 0x8, 0x2, 0x1f, 0xfffffffe, 0xffffffff, 0xae, 0xaf, 0x4, 0x4, 0x3, 0xee46, 0xc50, 0x3, 0x2, 0x1000, 0x81, 0x0, 0x1, 0x1, 0x10001, 0x7, 0x7fff, 0x1, 0x2, 0x80000000, 0x7ff, 0x4]}) 21:16:12 executing program 0: getrusage(0xffffffffffffffff, 0x0) 21:16:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x8000000, @planes=0x0}) 21:16:12 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x102, 0x2, {0x100, 0x4, 0x6, 0x1000}}) setgid(0xffffffffffffffff) 21:16:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x7, @planes=0x0}) 21:16:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x487e, 0x4, 0x5, 0x7fffffff, 0x2}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) 21:16:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xfdfdffff, @planes=0x0}) 21:16:12 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x8000000, @planes=0x0}) 21:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={r3, 0xe8, "94169330676a4c882989c54e42d1e082efac08dac96c28e8ccfe3a6b23625a6760e9c33d00e9c1f6b479e6c922b199dd8acc185156a0a4102c1779e2b102ebf633f1341e158c7f7c4c6790933e0bae5d854014c11a42887fbf9c52ae9789eb963849ac1803586c89650f07c3d5a680a861d70140b8415203211fa1adb44fe65003e8aafcb4fee47d9a2d63f25645a7ba3ea122fa0dfbe3d097d054cb932803463bdb1e1100222fbf6175a03f6793b963dea7eb86f21f2ec0b838056eff9159ec683cc41e5a63112b5d752a8ab2e7f273e7ab86227da3c05472098cd06bba94ee6cbed8e1f2c708ba"}, &(0x7f0000000400)=0xf0) socket$nl_generic(0x10, 0x3, 0x10) 21:16:12 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) setgid(0xffffffffffffffff) 21:16:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x8, @planes=0x0}) 21:16:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xff000000, @planes=0x0}) 21:16:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0xc6, 0x0, 0x4, 0x2000, 0x7, {}, {0x4, 0x8, 0x9, 0x90, 0x7, 0x8, "93f8332c"}, 0x0, 0x3, @offset=0x8, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {r2, r3/1000+60000}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20, 0x0, r4}) 21:16:12 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0xc6, 0x0, 0x4, 0x2000, 0x7, {}, {0x4, 0x8, 0x9, 0x90, 0x7, 0x8, "93f8332c"}, 0x0, 0x3, @offset=0x8, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {r2, r3/1000+60000}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20, 0x0, r4}) 21:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={r3, 0xe8, "94169330676a4c882989c54e42d1e082efac08dac96c28e8ccfe3a6b23625a6760e9c33d00e9c1f6b479e6c922b199dd8acc185156a0a4102c1779e2b102ebf633f1341e158c7f7c4c6790933e0bae5d854014c11a42887fbf9c52ae9789eb963849ac1803586c89650f07c3d5a680a861d70140b8415203211fa1adb44fe65003e8aafcb4fee47d9a2d63f25645a7ba3ea122fa0dfbe3d097d054cb932803463bdb1e1100222fbf6175a03f6793b963dea7eb86f21f2ec0b838056eff9159ec683cc41e5a63112b5d752a8ab2e7f273e7ab86227da3c05472098cd06bba94ee6cbed8e1f2c708ba"}, &(0x7f0000000400)=0xf0) 21:16:12 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setgid(0xffffffffffffffff) 21:16:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x300, @planes=0x0}) 21:16:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xfffffdfd, @planes=0x0}) 21:16:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0xc6, 0x0, 0x4, 0x2000, 0x7, {}, {0x4, 0x8, 0x9, 0x90, 0x7, 0x8, "93f8332c"}, 0x0, 0x3, @offset=0x8, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {r2, r3/1000+60000}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20, 0x0, r4}) 21:16:12 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setgid(0xffffffffffffffff) 21:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 21:16:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={r3, 0xe8, "94169330676a4c882989c54e42d1e082efac08dac96c28e8ccfe3a6b23625a6760e9c33d00e9c1f6b479e6c922b199dd8acc185156a0a4102c1779e2b102ebf633f1341e158c7f7c4c6790933e0bae5d854014c11a42887fbf9c52ae9789eb963849ac1803586c89650f07c3d5a680a861d70140b8415203211fa1adb44fe65003e8aafcb4fee47d9a2d63f25645a7ba3ea122fa0dfbe3d097d054cb932803463bdb1e1100222fbf6175a03f6793b963dea7eb86f21f2ec0b838056eff9159ec683cc41e5a63112b5d752a8ab2e7f273e7ab86227da3c05472098cd06bba94ee6cbed8e1f2c708ba"}, &(0x7f0000000400)=0xf0) socket$nl_generic(0x10, 0x3, 0x10) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x500, @planes=0x0}) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x2}) 21:16:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0xc6, 0x0, 0x4, 0x2000, 0x7, {}, {0x4, 0x8, 0x9, 0x90, 0x7, 0x8, "93f8332c"}, 0x0, 0x3, @offset=0x8, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {r2, r3/1000+60000}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20, 0x0, r4}) 21:16:13 executing program 2: setgid(0xffffffffffffffff) 21:16:13 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x1db100, 0x1a3d00) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) 21:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) 21:16:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x600, @planes=0x0}) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x3}) 21:16:13 executing program 2: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x2, [], &(0x7f0000000140)=0x80}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0x1000, 0x1, 0x0, 0x3f, 0x3, 0x550, 0x80, 0x10000, 0x7fff, 0x1, 0x9, 0x4, 0x9, 0x0, 0x0, {0x5, 0x4}, 0x1, 0x7f}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) 21:16:13 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5452, 0x0) 21:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xc, "6277cbd76e273421766d2141"}, &(0x7f0000000280)=0x14) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x4}) 21:16:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {r2, r3/1000+60000}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x700, @planes=0x0}) 21:16:13 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x2000) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x5}) 21:16:13 executing program 2: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@remote, @in=@empty, 0x4e20, 0x40, 0x4e20, 0x4, 0xa, 0xa0, 0xa0, 0x2f}, {0x6, 0x0, 0x1, 0x6, 0x2, 0x7a, 0x1, 0x2}, {0x7fffffff, 0x7, 0x7, 0x7fffffff}, 0x5, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in=@private=0xa010102, 0x3501, 0x0, 0x22f9529c949a692d, 0x3, 0x6, 0x8, 0x8}}, 0xe8) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x800, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)={0x7fffffff, 0xb, 0x4, 0x20, 0x3, {0x0, 0xea60}, {0x2, 0x0, 0x7, 0x5, 0x8, 0x7, "7bf5b0ff"}, 0x5, 0x2, @planes=&(0x7f0000000180)={0xfffffff8, 0x3, @userptr=0x4, 0x3}, 0x2, 0x0, r2}) 21:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x1, 0x8b3c, &(0x7f0000000200)) 21:16:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xff00, @planes=0x0}) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x6}) 21:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 21:16:13 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x65, 0x1}, 0x7fff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x208403, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x6, 0x0, 0x5, {0x4, 0x5, 0x7}}) 21:16:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:13 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000080)={0x80000000, 0x400, @value=0x5}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x657, 0x5, 0x80, 0x2, 0x5, 0x3f, 0x2}) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x7}) 21:16:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x1000000, @planes=0x0}) 21:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x1}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:13 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000140)={0x0, 0x17fffffb, 0x200e}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x10000) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000340)={0x3, "53f76428e3ae29da4470a93c70682621f1b5cc30349c1d3cf336bf25217ef543", 0x3, 0x9, 0x2, 0x200, 0x4, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES64=r3], &(0x7f0000000100)=0x1008) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x101, 0x8040) r5 = socket$inet(0x2, 0xa, 0x5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000004c0)={0x0, @bt={0x5, 0x2, 0x0, 0x1, 0x2, 0x9, 0x0, 0x7f, 0xfffffffc, 0x0, 0xc2e, 0x6, 0x5, 0x670d, 0x5, 0x2f, {0x400, 0x8}, 0x3f, 0x9}}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x8001, 0x0, 0x5, 0x9}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r7, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="46c4e5ff868201024000", @ANYRES32=0x0], &(0x7f0000000180)=0x8) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:13 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x8, 0xa8c5, 0x1007, 0x2, 0x9dcf9e087f3774cc, 0x4, 0x0, 0x1}}) 21:16:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2000000, @planes=0x0}) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x8}) 21:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x59, 0x1ea4, 0x8, 0x2d2, 0x5}, &(0x7f0000000180)=0x14) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:13 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000001c0)=0x80) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x2, 0x406000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'vlan0\x00', @ifru_hwaddr=@dev}}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5450, 0x0) 21:16:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x3000000, @planes=0x0}) 21:16:13 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000001c0)=0x80) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x2, 0x406000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'vlan0\x00', @ifru_hwaddr=@dev}}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5450, 0x0) 21:16:13 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x300}) 21:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f00000002c0), 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x4000000, @planes=0x0}) 21:16:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x2, 0x4, 0xad801b0abadcad2e, 0xfffff79b, {r1, r2/1000+10000}, {0x5, 0xc, 0x0, 0x3f, 0x6, 0x80, "37f7142e"}, 0x2, 0x3, @fd, 0x3}) 21:16:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x500}) 21:16:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x5000000, @planes=0x0}) 21:16:14 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = accept(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x200080) r6 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x10000, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f00000016c0)='/dev/audio#\x00', 0x10001, 0x101200) ioctl$sock_ifreq(r3, 0x8995, &(0x7f00000017c0)={'veth0_to_hsr\x00', @ifru_names}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001780)='/dev/nvram\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001800)) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, r5, &(0x7f0000000180)="f61230cd7f80a9242c798a7cdd21468192975e4774ffe7075c1a5a045121c28e981dec2069f1f9b4bff783df6ca380116c0a1eb9d0fdf863b63151c1f9a796bd65ca54ae53ef6a264e8b4269e0ae4260a11e172a0a89d7362e3d1c9a4207192550f625fcdfa76907388f2a89a584249d22c5f60c325acec22154e8573e47ef4203d4286de9d420b221a7579560d0c7dc07907759f3b9d87069873d4e97b7a7eba0e2b9328cac427635c3c01fb07b3ee487f0ea0d3a6b8237c80cef0c3ff32bdc6d21871aedff8ddce284eb5d7e4f50", 0xcf, 0x100, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x8000, r6, &(0x7f0000000480)="9ccbd9ffaf56de7c3388ad45ea4a45fc17722a310dce3e1e0de5e421a37e3de0a5a8c215eb8060d3a5469c62b845579d0c285642621a6931e25051b5e4aed324e0c376d9a8b4025b3c982429e2e80ee4e0460f5d0b51c9b1f267cb076c403b93f5369b9efd78b82162fbbb0b453894f990d3daa10d54a3f9e6638cc773d9890700bf6dfc632ff00daf8dfc49da5a7c37bc13d62902a2e7de2cbd76afa827b005da073c868d6989b8ea5d53bb36e53fed532bdb1e3891b80e10f48d860422c36d0bc8066ba9ee3286c21fa8f5ac1be22930df908d899b53f162ca7143067bbb4a9ccb91b69876210afe2397c027f3701556db9624aa61afd701335b05f5844aad11078483c8d9135c14a31b2ea46da4a29906a76bb4c15f24910c57a219f8ab655ee1b2c0652a0aa745cc20f2ca7f4971ff3d2d8210874f1f9b6925560b7373f12ea08cfddb8f4bc80ab26450e36df35a8e1435b1b84085209c64ce6f7609d56de6d0e7a42d0163fa7f72e7752b99b9c610d257e2208f101669d6fba212a153effee2f49d30a571901a5055867c33d10de66d63ee0ed03a0fc6808bf5ad918bcef8b5ba6ce7676d3c8d80ade1d6f6b3f36ebab57ee62f88a1e2f4e62af165225b879533f4448988de0bef9bf78d3db2edf6b14c2a08cbb32893f47a77b8cd70ca816f2680cf8c6f7c5f4b9e92f5272313dffc9c5993a0079864f2dc7030917bad64ed923d104b4368098de09d7c2b480bcdc182c2674fcafe6a4e0e9e656c7993afd8fad24822e2e63e7e0be57efb7d96c3dc3003823cc90854d580d7b48b7c06856905c092949cdfe0ea76e698565d8c52175373ef080eec5f073083595a5c8f266814e40797bdb9a949a9b9babb05ece01002f4726c2071e063938bf3697a5f6ed3e843628063b55d0538b4e86a3f6018542457b79ad753e16b0539344f57b1d15d460ba3112b76a7eba96ddebc756c150813c5beb11960a359871a21128aa8290a59b2f79f51ea9d9eff2b62855eb32f62374049e8836e4197b70fd11744b3ad64adb05af8d862b6903e54d134052dde57992923b76b9c3ad6fb46b9a62cfd1a1b822ac31d58f2f5b7ad12556f7eced93f0ccbcfc859535c9713e4c03f9854d3d42c2bb199d68c1d1244bbb94895aa724065836d9c1344b0b0c211603a4519615493c97aa347c82beb95a8ca24a0d2e11b8eaf21416c9d133cef6c6ae3046e94d69a1c4c036523907b36d4f0fefdf596cdd3c9a567bb4fc501ebc2b2652163ce93d1671f7c13653d00555e0b3dda799c9c56f8cab2a0fe1e825c43275b5b6d00a452ffe60362e20645bce8a727aae6c6060eff4c2832c7da765a1f76b3295c3dfcac40c722ac98d28bceb3b3dbd89b7b81ec794207b5bbc1984112cdb6755d9523ff68e6bb799dbf961d3343a2242b201152bc8194089fe34285ece55d03fde398c4809190f3f91ce8b7d13d6d9a9bb7d09969594bbe3be7dce29e7877cb05640c34515457a76443f88ea121732d8f0520fe34f764c26981988afc882913161999c03410dd1873904e42b839834e2415fdae2769823cabba075cc53945d204c074589efa64aa752bf4da6c97b2eed2301699026b1701cf719f199c416a91acce90a01ceb884dfaced0e66abe2ffbe540fe9654a3e885673abed709e9874360e3a15ce98d679280e89568f59a85e8ad8553174208f5efc2e937c9164304b6d04edaea169609e1db10843015db7c9f0a6c3ff11face7938cfc6616c11c2d3a476f64c44ffaa5bd12c0f94d2a7c0c168db1ba7ab702be0f5a09c4d051829b54f588671cf5cdac0bb08a8caf63a85bc91806f65e8331aaf19752a302d9e3c715c4a510839009ab365cdae7084524d62afa689c4d7d39d7c6e8fcfa0860b86626daf3b2d1592dd0c779f9bfec5b318d57f16eb2c3e3ec7c7a53498b95fc5e6581694098277144c2743262671ab135b814ab43cc3f286754b8070c3fd89aab2f06c2a65c424a9c42a31fe2b65ad3e4d71504ed33130eb8ffcdfeaa90e246a403485c3ad4c811f8ebb1b053d066a22e895a257b72517e2af904a5bcd801d2d89ff47c841f6f64456e18803d200bba1440fa4c9d22a4907d5259a7dcfc47e27afcdf6d9e3ea6109cc04dd18d51c422fff7a7d7e3c55c8f019aa3db941d3d7485d87a163104ba61bb64a015a0c5ac78782c811afb9766691eff74e626e5ab2617d2b70614b23726a5dd43c3222157b6b4bb639145928ac598be66f7f51bf9d5fb9933bf1d68053439b375857f192d4b02dc9247eb466f52ee356faabb7fabd2b9348b3a8a33335474df76963b015cd269f9003839d90281bc03fd5b0e4406922800be78b8771e947f0eb9fbff9be0fa0ed8bf0be2a5913aaf5fac24b76cb3e2fdf8ed2f9ead6824ecd1725d4dec491ccaf2285d5ae8fb329334966bb8af96a0e7008e1a99d4114ce3d56f309996449885c77224931d22db7b473e8a1f57bc4d25a5edc8dc3e3e8f18cb4d2777c267051175e1206c35924af92127888f655bada942578a7940aeeaf6931b8c71fd12d8f96e85ff6a4947c256aa268a4d6adbef7c2ffcd0f5e6adfd7200db846a57fa86a2b6dc244606d2e30d386a3f2939e373e4ef03d2f50ae1846b55d127f1424675e21126e579982007f3480e7e49506bafe656d21bae083c3cfef9e5fa376be3532d834d9230e8b665fe6577c83a3eda409a7fbda649bc6a0b2df35fd74217892b6953fa261506f5576c46f7b5f608fb996134b3b3beb3febe0b77d8a6e4a4c8e47054e95ce1619054a16624bce9e2e9a7814b5b68f6825940f40766f9d3d361cb58fbacd1e7d9fc78a19cdc7b6f7231efc88c891881d667be1e1f672040792ba1243aaadafbf04cf68ee6caf7b85a090b085ad21bf534468a35aad27b58f60789370468d3fdcabfd9e4fb39d76472d0eb77edea091fd9ae8c316f2b64ab5824ef30767b9af399762a50cca7b881b139748382247b62ec176ea35a09f891ee5be26b8bc6e798529ae31f0f3166442fb6cc4d5c2858ea33fadb6c945eae44f6c8e4dc6871ceb215715b3c72e00ce0e291fa26e58a6244670f5b43412899e991f58ffcfd100339d38202c993eb55f33bed85c59d12188e1a3b2e0be1cc77cf2353fd76f47c9ef92e06ecf47a2294258f778119fc8e738f14b5043417fd60bd46b552a182839541f8041643f163753eda6689cc16746549056d7c875a98dc17506d3fc887986cbe1210171eca431f8cf45c289912694887641539c7014417e40177d3fe30b72d03f067d9becc168b2bee96ef8ac51e02a70e17a2ae532cd36ea90a55b2e9127e2741b529d46ffa4abc68a649951d3f58d931298ff69df31f7be8b64bea65a291b0f4371190cbe2995ded9c0525c2163f27463d91773a9ba2645707b03ad35c92a231f65186931fab1820e64513d93967b46013e45c17f74a63da6933b10309d068174b1c94ad8152d3cc05d97effd0060e1a58ed579bbadc9739b1cf97eb838cb1ae222f77196016c73ad33a54480f2ba7366b05e6da7559ff09e3a505678ebf5c4579b46aabe0389e988650d15e29cd51ac033109a3c9a58dc805d0dcc73c8a6b3f5ddac37e108ee413e9cf747b3b5720bcd11b8ef67128c355d9cc7d836e4ba918b8b69fecbe2dfacda9f81f5a98aeaf5d305be125c5e95e8cbaeeeb369706dba486b83e8bcf9c469f99d2e23c0293548f00d3483b903bc4e709ca833ff73a482628b875c095ab7a85f4bfa5bc8097c6f67f6dbb62473b8f6576d30a8d96130ae720218cb111001434427f9e24dd7b6c50be28c1b1f7ca043c1016bb8e742c002a8b63b003d079fc9d4fedb5d57e6bbd8086ef779ea512412faf706545e66859a8fe77fc8802ff0b4e05ff2cbf446dc0ab898ec3d6c7a50d901fb0a3c516c2401891a777c6e6553c90030a8a8fc9d3276ba1bcf69344c9c99328834ee26262a0d4aecdc5f5f8bce17a4dca6defdfcba4a76e68bb8ff6dfb1381160c3f01a348526a9c596b08a97b73bd6f3c80cf6fd605f1decce9d4c7b73b0204a7ba3f0daa6b473744d459a03c3c51586055f9be00b49210e13d667e7ecb4df615a7aa8c1a565a61f9e8c5a1d2f200fa3dced887f9f5d5ff0b9bad87aacf158f3ef5de984882dd03e39d1ed72292554019928903e212289cf75b98480a91e8af469b0a204bd21799297bbfbb332aa86a533fae74d5e2aba8100a3234b62b3e9395258672e60f49116bb5a3703ffdd34d4337b840eaf963a75b1972a665613fe40d38851e69eb7fd0f21e382e0c5f3d53289dd2cca2253fcedbf6f114a30a5c3b40d936032ea7288356a77e51896cf6da6831ee8707df9c1066980d190f6934ae4b6f07c9179c6d6e5811ca6bd1a847365a8d31bc16bf02b909f0c098aa09be0dc5a56cb5343da138798aed5eb14fa00f1a9a5704287a9e67d1816eb27cbc995f24d42e907206923e48d23644cfad68354dd95d2c87e768134150fb41e7208ed8d264a3831985714fedd77e7d24855ea784e880b99e1b988b263febb4cfee3143f37302f6be2a8dbc85a4555cb1f42f16c316c43f793bef4c2ce28f6c09b3c7509e52b352f7486e23042964f9ed057738ff6d3f02d24df614c790295c76876b13e62c98f8ff5cfb8c726c3973f9a98929c64b004bd365ddfbec019ad861dd50991c1fe0a2df5adb7adf18fe90ee88092798a8bfe1db27062ffd4108a2747453fd2eb698642197b70bd8f6b7fdddefc9376a4fb5e3d3d03549abc49c1b34d3934172bbf965cdafc97a3568662451aa3a56a6b2429f2bfe4970a1adc789f7f3c7d4ed30b0811163676ab7210d3cca2199403e22d0d8eaf8ed1df73830316850b374744f7ca57ef273c18e4a0a66c5949fbb5991d489891b544e29b2af35b8268a0661b3e63b24e552dd6f7fe027f11146a1a9fd3113ab503b6ee9fc22c427fffa34ce7d92de95c39dd934f294525e0aae051f76dabd48dd3779cea1a10fc8f294a62ede057785af51d9a1e6774beecbd774b67f207b1b17f9e2e80ab43405d258dfb4d07b5c1dfb0ef7779bccde031a37b3d8ca84c6858b02fb85014db4cc2d2bae4d1f1ba5f1243861d5a0b1389047b1a724e707836d853f12255bad1d6f0dc3c66fff5e1fdf43a12767d3e2986a6226cbef4588ab9b0d6e9571368d193ebde58b2fecc561464471a018100f40f6eede3006dbc7b850ad73cdf2c43a0ca60ecfe4bf35ebf8654857352fc1a401e9bf870e01b60b935481ab8db24ee2a46073a25560c64708b73a53ddc9171150855835a490b8b80ea5b34d245ece226ce49a707b85c89db31a3d9e84312040e2619025381e2b9a2ab60de6ef3a20448b72ecd38069b2f9f432ca2d25414d2ec58527aa199ebf9793932e3a78199dab373a201fdaf7c965eea5a8c48f973d57663834f92be6791ff4980d373be9f6f7d681da6ad6069c1d8c0ef3ae1714ea0b2aca33561b0b7c21fdf3f7490ff1fefd27c00b6ba7c3cddff6e05911a18e6edf96c6f8279a11703b3185ad3f9d3902bc5475bb0b32dbdfe8680666783dbe6fc76ba137e57e23efce90884c647ee120b273b54adbfcf6af4fe95017b95cc4bac217fc7f363a246529bfc8aa9202f9cbdcd8e58d0109c9fb1bd9332e0be0e62873445eaada4917a365630700aaf58b909109545d3d12d54149d9620d2e04456c0afc8e7ddaae9e569178abf75b95cc7161a9331504a9878ac1191d39cf653944970a1012983d124e4c831f971846e7e072d6fc1f2e0bdd74eabc78e5fb99f7f9b59c5870d1b9d828dd114", 0x1000, 0x8000, 0x0, 0x2, r7}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x6, r4, &(0x7f0000001480)="4f900f3b79d45c0eaf6794aebf3a7701226f448fb0eea4c09bc4292d5792fc7ec7a9ccc592c84a4b72905e0cf7ebd6ee3fd60967de309620d4efc148388cce6229d4f85cfcb76f200d40e32ad6e8f39dea861d82115b045a6297284f90379d209d6ec54473b0c58f04f42a6a6d6a1c37d176331a1f234260a35dd04abb777f0b3159ae187e8229d43ee9d09aa76d5db2", 0x90, 0x5, 0x0, 0x3, r8}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x491, r2, &(0x7f0000001540)="07fc61a5a681a56aa26d8ec578265dbf75edd6558debcac631f8b5a87d323a40db3af15009c72f9dc32b4b0493d46d57c30765baea9d78b7ee", 0x39, 0x2000000800, 0x0, 0x1, r10}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x6, 0xb3, r1, &(0x7f00000015c0)="e20dc7299e98375701aec9561811076e74a26dec6ded7f1aebf3d79b70dd0b0391cca295e372eb5deb3f523068030b83d7808af194d5a671664b40a9643070b1c9330da02464f24c037baad1d5eef71dceedee2e9d7a259e9f47d9cf82bf791d3c81ea6d2c42f83f32e7659b230229fdb8a976520318876ff0e4a17a163063647343958d869c3fd017b6c614396a9adba275047a2581b7fac78cc5e046868f071fef295556c5488f00e5ee59d9dca5fc66316e52801778aae13ee77feaa7321ca4065df882434e202a43cc13773044e45237d19eedaf1d28789d9e51348cd439f2cbe879e09d345ed2f3d2", 0xeb, 0x1f, 0x0, 0x4, r9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001880)=0x1, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000040)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = accept(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x200080) r6 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x10000, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f00000016c0)='/dev/audio#\x00', 0x10001, 0x101200) ioctl$sock_ifreq(r3, 0x8995, &(0x7f00000017c0)={'veth0_to_hsr\x00', @ifru_names}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001780)='/dev/nvram\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001800)) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, r5, &(0x7f0000000180)="f61230cd7f80a9242c798a7cdd21468192975e4774ffe7075c1a5a045121c28e981dec2069f1f9b4bff783df6ca380116c0a1eb9d0fdf863b63151c1f9a796bd65ca54ae53ef6a264e8b4269e0ae4260a11e172a0a89d7362e3d1c9a4207192550f625fcdfa76907388f2a89a584249d22c5f60c325acec22154e8573e47ef4203d4286de9d420b221a7579560d0c7dc07907759f3b9d87069873d4e97b7a7eba0e2b9328cac427635c3c01fb07b3ee487f0ea0d3a6b8237c80cef0c3ff32bdc6d21871aedff8ddce284eb5d7e4f50", 0xcf, 0x100, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x8000, r6, &(0x7f0000000480)="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", 0x1000, 0x8000, 0x0, 0x2, r7}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x6, r4, &(0x7f0000001480)="4f900f3b79d45c0eaf6794aebf3a7701226f448fb0eea4c09bc4292d5792fc7ec7a9ccc592c84a4b72905e0cf7ebd6ee3fd60967de309620d4efc148388cce6229d4f85cfcb76f200d40e32ad6e8f39dea861d82115b045a6297284f90379d209d6ec54473b0c58f04f42a6a6d6a1c37d176331a1f234260a35dd04abb777f0b3159ae187e8229d43ee9d09aa76d5db2", 0x90, 0x5, 0x0, 0x3, r8}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x491, r2, &(0x7f0000001540)="07fc61a5a681a56aa26d8ec578265dbf75edd6558debcac631f8b5a87d323a40db3af15009c72f9dc32b4b0493d46d57c30765baea9d78b7ee", 0x39, 0x2000000800, 0x0, 0x1, r10}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x6, 0xb3, r1, &(0x7f00000015c0)="e20dc7299e98375701aec9561811076e74a26dec6ded7f1aebf3d79b70dd0b0391cca295e372eb5deb3f523068030b83d7808af194d5a671664b40a9643070b1c9330da02464f24c037baad1d5eef71dceedee2e9d7a259e9f47d9cf82bf791d3c81ea6d2c42f83f32e7659b230229fdb8a976520318876ff0e4a17a163063647343958d869c3fd017b6c614396a9adba275047a2581b7fac78cc5e046868f071fef295556c5488f00e5ee59d9dca5fc66316e52801778aae13ee77feaa7321ca4065df882434e202a43cc13773044e45237d19eedaf1d28789d9e51348cd439f2cbe879e09d345ed2f3d2", 0xeb, 0x1f, 0x0, 0x4, r9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001880)=0x1, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000040)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x600}) 21:16:14 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:14 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x6000000, @planes=0x0}) 21:16:14 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = accept(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x200080) r6 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x10000, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f00000016c0)='/dev/audio#\x00', 0x10001, 0x101200) ioctl$sock_ifreq(r3, 0x8995, &(0x7f00000017c0)={'veth0_to_hsr\x00', @ifru_names}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001780)='/dev/nvram\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001800)) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, r5, &(0x7f0000000180)="f61230cd7f80a9242c798a7cdd21468192975e4774ffe7075c1a5a045121c28e981dec2069f1f9b4bff783df6ca380116c0a1eb9d0fdf863b63151c1f9a796bd65ca54ae53ef6a264e8b4269e0ae4260a11e172a0a89d7362e3d1c9a4207192550f625fcdfa76907388f2a89a584249d22c5f60c325acec22154e8573e47ef4203d4286de9d420b221a7579560d0c7dc07907759f3b9d87069873d4e97b7a7eba0e2b9328cac427635c3c01fb07b3ee487f0ea0d3a6b8237c80cef0c3ff32bdc6d21871aedff8ddce284eb5d7e4f50", 0xcf, 0x100, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x8000, r6, &(0x7f0000000480)="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", 0x1000, 0x8000, 0x0, 0x2, r7}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x6, r4, &(0x7f0000001480)="4f900f3b79d45c0eaf6794aebf3a7701226f448fb0eea4c09bc4292d5792fc7ec7a9ccc592c84a4b72905e0cf7ebd6ee3fd60967de309620d4efc148388cce6229d4f85cfcb76f200d40e32ad6e8f39dea861d82115b045a6297284f90379d209d6ec54473b0c58f04f42a6a6d6a1c37d176331a1f234260a35dd04abb777f0b3159ae187e8229d43ee9d09aa76d5db2", 0x90, 0x5, 0x0, 0x3, r8}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x491, r2, &(0x7f0000001540)="07fc61a5a681a56aa26d8ec578265dbf75edd6558debcac631f8b5a87d323a40db3af15009c72f9dc32b4b0493d46d57c30765baea9d78b7ee", 0x39, 0x2000000800, 0x0, 0x1, r10}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x6, 0xb3, r1, &(0x7f00000015c0)="e20dc7299e98375701aec9561811076e74a26dec6ded7f1aebf3d79b70dd0b0391cca295e372eb5deb3f523068030b83d7808af194d5a671664b40a9643070b1c9330da02464f24c037baad1d5eef71dceedee2e9d7a259e9f47d9cf82bf791d3c81ea6d2c42f83f32e7659b230229fdb8a976520318876ff0e4a17a163063647343958d869c3fd017b6c614396a9adba275047a2581b7fac78cc5e046868f071fef295556c5488f00e5ee59d9dca5fc66316e52801778aae13ee77feaa7321ca4065df882434e202a43cc13773044e45237d19eedaf1d28789d9e51348cd439f2cbe879e09d345ed2f3d2", 0xeb, 0x1f, 0x0, 0x4, r9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001880)=0x1, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000040)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x700}) 21:16:14 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x4, 0xc, 0x4, 0x1000, 0x4a04, {0x0, 0x2710}, {0x5, 0x2, 0x6, 0x4, 0x3f, 0x4, "05b0e590"}, 0x6, 0x4, @planes=&(0x7f0000000040)={0x0, 0x80000001, @mem_offset, 0x8}, 0x8}) 21:16:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xff00}) 21:16:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x7000000, @planes=0x0}) 21:16:14 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:14 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000100)={0xffff, 0x0, 0x12, 0x7fffffff, 0x7ff, {0x40, 0x3}}) 21:16:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x6000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x1000000}) 21:16:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x8000000, @planes=0x0}) 21:16:14 executing program 1: r0 = socket$inet(0x2, 0x0, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x3, 0x5, 0x1, 0x0, 0x4, 0x7, 0x3, 0x5, 0x2, 0x7fffffff, 0x4, 0x8, 0x3f, 0x52a9, 0x12, 0x1, {0x4, 0xffffffff}, 0x4, 0x81}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xfdfdffff, @planes=0x0}) 21:16:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x2000000}) 21:16:14 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x3000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x3000000}) 21:16:14 executing program 1: r0 = socket$inet(0x2, 0x0, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:14 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x93, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xff000000, @planes=0x0}) 21:16:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x7) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r3 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000100)={0x2, 0x101, 0x1, {0xf3, 0x4, 0x9, 0x5}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0xff00, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 21:16:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xfffffdfd, @planes=0x0}) 21:16:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x4000000}) 21:16:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 21:16:15 executing program 1: r0 = socket$inet(0x2, 0x0, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x7) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r3 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000100)={0x2, 0x101, 0x1, {0xf3, 0x4, 0x9, 0x5}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x5000000}) 21:16:15 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) accept(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x0, 0x0) socket(0x9, 0x2, 0x3) accept(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5452, 0x0) 21:16:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 21:16:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x2}) 21:16:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x7) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r3 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000100)={0x2, 0x101, 0x1, {0xf3, 0x4, 0x9, 0x5}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) 21:16:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x6000000}) 21:16:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x3}) 21:16:15 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000100)={0x2, 0x101, 0x1, {0xf3, 0x4, 0x9, 0x5}}) 21:16:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x7000000}) 21:16:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x10001, 0x2016, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x400) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x490101) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000240)={0x8, 0x2, 0x4, 0x1, 0x10000, {0x77359400}, {0x2, 0x0, 0x0, 0xf9, 0x34, 0x8, "8d52b83a"}, 0x39, 0x0, @fd=r1, 0x3, 0x0, r1}) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)={0x5, 0x7, 0x4, 0x70040, 0x8, {0x77359400}, {0x2, 0x2, 0x1, 0x7, 0x1f, 0x9, "0950fb3d"}, 0x81, 0x1, @fd=r5, 0x24, 0x0, r1}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000140)={0x7fffffff, 0x0, 0x4, 0x2000, 0x8ea, {r2, r3/1000+60000}, {0x1, 0xc, 0x5, 0x1f, 0x0, 0x20, '\t\x00'}, 0xd9, 0x4, @planes=&(0x7f0000000100)={0x9, 0x6, @mem_offset=0x2, 0x9}, 0xffffff7f, 0x0, r6}) 21:16:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x4}) 21:16:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x8000000}) 21:16:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:15 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) 21:16:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x5}) 21:16:15 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000100)={0x2, 0x101, 0x1, {0xf3, 0x4, 0x9, 0x5}}) 21:16:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xfdfdffff}) 21:16:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x8, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x6}) 21:16:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xff000000}) 21:16:15 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) 21:16:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0xffffffc0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:15 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000100)={0x2, 0x101, 0x1, {0xf3, 0x4, 0x9, 0x5}}) 21:16:15 executing program 1: socket$inet(0x2, 0x3, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x7}) 21:16:15 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) 21:16:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xfffffdfd}) 21:16:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0xbee7a0851ffefbaf, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:15 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000100)={0x2, 0x101, 0x1, {0xf3, 0x4, 0x9, 0x5}}) 21:16:16 executing program 1: socket$inet(0x2, 0x3, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x8}) 21:16:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x20, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:16 executing program 1: socket$inet(0x2, 0x3, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) 21:16:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:16 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) 21:16:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x40, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x300}) 21:16:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000480)) 21:16:16 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) 21:16:16 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x2}) 21:16:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x69, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x500}) 21:16:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 21:16:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x3}) 21:16:16 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) 21:16:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:16 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) 21:16:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x600}) 21:16:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 21:16:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x4}) 21:16:16 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) 21:16:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\fZ}2'}, 0xab, 0x4, @fd, 0x20}) 21:16:16 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) 21:16:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x700}) 21:16:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x5}) 21:16:16 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:16 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xff00}) 21:16:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\fZ}2'}, 0x0, 0x4, @fd, 0x20}) 21:16:16 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) 21:16:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x6}) 21:16:16 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:16 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:16 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x1000000}) 21:16:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\fZ}2'}, 0x0, 0x0, @fd, 0x20}) 21:16:16 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x7}) 21:16:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\fZ}2'}, 0x0, 0x0, @fd}) 21:16:17 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) 21:16:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x2000000}) 21:16:17 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x300}) 21:16:17 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x8}) 21:16:17 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) 21:16:17 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x3000000}) 21:16:17 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:17 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) 21:16:17 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x300}) 21:16:17 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:17 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x4000000}) 21:16:17 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) 21:16:17 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x500}) 21:16:17 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:17 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:17 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x600}) 21:16:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x5000000}) 21:16:17 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) 21:16:17 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:17 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x6000000}) 21:16:17 executing program 1: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x700}) 21:16:17 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:17 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x7000000}) 21:16:17 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:17 executing program 1: syz_open_dev$video4linux(0x0, 0x78e, 0x107002) 21:16:17 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xff00}) 21:16:17 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x8000000}) 21:16:17 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:17 executing program 1: syz_open_dev$video4linux(0x0, 0x78e, 0x107002) 21:16:17 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xfdfdffff}) 21:16:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x1000000}) 21:16:18 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:18 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:18 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:18 executing program 1: syz_open_dev$video4linux(0x0, 0x78e, 0x107002) 21:16:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xff000000}) 21:16:18 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:18 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x2000000}) 21:16:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xfffffdfd}) 21:16:18 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) 21:16:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x3000000}) 21:16:18 executing program 1: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x107002) 21:16:18 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) 21:16:18 executing program 5: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) 21:16:18 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x4000000}) 21:16:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:18 executing program 1: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) 21:16:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x8}) 21:16:18 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x2}) 21:16:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x5000000}) 21:16:18 executing program 5: syz_open_dev$video4linux(0x0, 0x78e, 0x107002) 21:16:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x3}) 21:16:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x6000000}) 21:16:18 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 21:16:18 executing program 1: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) 21:16:18 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x401, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x78e, 0x107002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000200, 0x200c, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0x5, 0x4, 0x928, 0x6}}) 21:16:18 executing program 5: syz_open_dev$video4linux(0x0, 0x78e, 0x107002) 21:16:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x7000000}) 21:16:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x4}) 21:16:18 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) 21:16:18 executing program 1: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) 21:16:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x10, 0x4, 0x5, 0x8}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x11, &(0x7f00000008c0)={0x0, 'team0\x00'}, 0x18) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000500)=0x10) 21:16:18 executing program 5: syz_open_dev$video4linux(0x0, 0x78e, 0x107002) 21:16:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x5}) 21:16:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x7ff, 0x8040) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000001c0)={0xff, 0x2, 0x7f, 0x7, "56555ce69ee4f9e76c253e878ef5cd62dc4d4ffe6c29bc5c84290664c865103df32c89cd3c8337f2f68b4323f12a54c919e282f27c3176f9cdea9614c0f76cf2b54106b65a9fd6e5f8e6cec0c53d10bc878cf5cea21059613d1a50277e87d7f684ed623201ed879458c1c220561fce14bce5b6b4a9bb6a25fb988fa846c57c0e1ff8dc6199edb3c4cbbe922318d81a158085700d0ccfa869a1ed5b34306551e932831c2ccb2692ea7fb4ff54dab6e997ed686aadb6b807de6223e68cd70ed9ac3d3102e7fd01e78ff24aafa9e56bb1305a3b48fe3c00330b1329415c8d848e006a013b724ca67f"}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x5, 0x9, 0x4, 0x4000, 0xb0, {r2, r3/1000+60000}, {0x2, 0x2, 0x8, 0x5, 0x0, 0x9, "8a49caad"}, 0xfffffffc, 0x3, @fd, 0x3f, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x4f8, 0x3, 0x4, 0x8, 0x570, {}, {0x1, 0x2, 0x0, 0xe3, 0x3, 0x5, "48901ced"}, 0x2, 0x4, @userptr=0x7, 0x6, 0x0, r4}) 21:16:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x8000000}) 21:16:18 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:18 executing program 5: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x107002) 21:16:18 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x5452, 0x0) 21:16:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setfsgid(0xee01) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x6}) 21:16:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xfdfdffff}) 21:16:19 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 5: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) 21:16:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setfsgid(0xee01) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:19 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x5452, 0x0) 21:16:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x7}) 21:16:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xff000000}) 21:16:19 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 5: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) 21:16:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setfsgid(0xee01) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:19 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x5452, 0x0) 21:16:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x8}) 21:16:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xfffffdfd}) 21:16:19 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 5: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) 21:16:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setfsgid(0xee01) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 21:16:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x300}) 21:16:19 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 0: r0 = getuid() setresuid(r0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x541b, 0x0) 21:16:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x5f0f, 0x1, 0x7ff, 0xffffffff, 0x5, 0x0, 0x0, 0x5}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) 21:16:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x500}) 21:16:19 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setfsgid(0xee01) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) 21:16:19 executing program 0: r0 = getuid() setresuid(r0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x541b, 0x0) 21:16:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x300}) 21:16:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') 21:16:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x600}) 21:16:19 executing program 1: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setfsgid(0xee01) 21:16:19 executing program 0: r0 = getuid() setresuid(r0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x541b, 0x0) 21:16:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) r3 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x700}) 21:16:19 executing program 1: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, "cc019f61"}, 0x0, 0x1, @planes=0x0}) 21:16:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setfsgid(0xee01) 21:16:19 executing program 0: r0 = getuid() setresuid(r0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 21:16:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xff00}) 21:16:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) 21:16:19 executing program 1: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) r3 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) setfsgid(0xee01) 21:16:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x1000000}) 21:16:20 executing program 0: r0 = getuid() setresuid(r0, 0xffffffffffffffff, 0xffffffffffffffff) 21:16:20 executing program 3: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x2, 0x0, @planes=0x0}) 21:16:20 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) r3 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:20 executing program 2: setfsgid(0xee01) 21:16:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x2000000}) 21:16:20 executing program 0: setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 21:16:20 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x880) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 21:16:20 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) r3 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x3000000}) 21:16:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0045878, 0x0) 21:16:20 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) 21:16:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:20 executing program 1: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x4000000}) 21:16:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) 21:16:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x400448dd, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 3: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, 0x0) 21:16:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) 21:16:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x5000000}) 21:16:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc0000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @sack_perm, @mss={0x2, 0x4}, @mss={0x2, 0x4}, @mss={0x2, 0x2}], 0x5) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x3000000, 0x1, 0x3, 0x40, 0xffffffff, 0x1bdc}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, 0x0) 21:16:20 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x100000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12, "dbb3f307"}, 0x0, 0x0, @planes=0x0, 0x2000}) 21:16:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r3 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, 0x0) 21:16:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x6000000}) 21:16:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x40000) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000001c0)={0x0, "8bbefbe2b20162304ff4ad8bb5cc6b5f06825248b8a1ead19bbf7a17ca71b760", 0x1, 0xd5ec, 0x1, 0x8, 0x0, 0x2}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0xffff, 0x2500) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x9, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x103, 0x6, {0x400, 0x3, 0x3, 0xff}}) 21:16:20 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x100, 0x0, {0x6, 0x80000000, 0x1, 0x20}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syzkaller1\x00', @ifru_flags}) 21:16:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x7000000}) 21:16:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, 0x0) 21:16:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x6364, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x8000000}) 21:16:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x10, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x3f, 0x7, 0x0, 0x43, "73c5c5b4"}, 0x9, 0x2, @userptr=0x2b, 0x8}) r2 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xfdfdffff}) 21:16:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet(0x2, 0x3, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000080)="22404bb413193c321b840d0c83ce226746e44726e17bdcc405eb45fff0f1c92e12f8a69c5c9fb9d3cdb9a0fe135d4dc0b4a43d65de43a8bdd53ed77f8f11dbe1de5bb07b4ac78d24a268c641482f3fd5354169262898bd81d2920e1e89f07653666e2a0a0b63b10647b4f64c632f27ecb24f83af01653be9de5e7742578d69b56a89c029ef1e92e4547fa7e9f277601401b355b7d3e260851b74ce100d65b8cd6aca386dd87384c57591f787cc3023fb11bf234cc5e8464c710f4a4bbb0df84483c3e55d50c8f7affdc9476e2016ebf49cbd7b0a938eda48a8d1cf5642854e5f504b6cd361", 0xe5) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000180)={0x40, 0x4, "d17483a44dbb4bedef7bee3c80ed21f278e180b2cab864530c42825b2a070f42", 0x7, 0x6, 0x83, 0x5, 0x248}) 21:16:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x4001) r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) [ 1924.723516][T17784] ip6_vti0: mtu less than device minimum 21:16:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xff000000}) 21:16:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet(0x2, 0x3, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000080)="22404bb413193c321b840d0c83ce226746e44726e17bdcc405eb45fff0f1c92e12f8a69c5c9fb9d3cdb9a0fe135d4dc0b4a43d65de43a8bdd53ed77f8f11dbe1de5bb07b4ac78d24a268c641482f3fd5354169262898bd81d2920e1e89f07653666e2a0a0b63b10647b4f64c632f27ecb24f83af01653be9de5e7742578d69b56a89c029ef1e92e4547fa7e9f277601401b355b7d3e260851b74ce100d65b8cd6aca386dd87384c57591f787cc3023fb11bf234cc5e8464c710f4a4bbb0df84483c3e55d50c8f7affdc9476e2016ebf49cbd7b0a938eda48a8d1cf5642854e5f504b6cd361", 0xe5) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000180)={0x40, 0x4, "d17483a44dbb4bedef7bee3c80ed21f278e180b2cab864530c42825b2a070f42", 0x7, 0x6, 0x83, 0x5, 0x248}) 21:16:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x80, 0xfffffffe, 0x100c, 0x3, 0x7, 0x8, 0x2}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0x4, 0xa, 0x4, 0x100000, 0xfad, {0x77359400}, {0x4, 0x8, 0x20, 0xe3, 0x13, 0x1, "91061991"}, 0x5c9, 0x1, @userptr, 0x2, 0x0, r1}) 21:16:21 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x890b, 0x0) 21:16:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xfffffdfd}) 21:16:21 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1924.923518][T17801] ip6_vti0: mtu less than device minimum 21:16:21 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000002640)=@in={0x2, 0x0, @local}, &(0x7f00000026c0)=0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002700)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x6, @local, 0x8}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0xbf1e, @remote, 0x1}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}], 0xc4) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0x26, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:21 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet(0x2, 0x3, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000080)="22404bb413193c321b840d0c83ce226746e44726e17bdcc405eb45fff0f1c92e12f8a69c5c9fb9d3cdb9a0fe135d4dc0b4a43d65de43a8bdd53ed77f8f11dbe1de5bb07b4ac78d24a268c641482f3fd5354169262898bd81d2920e1e89f07653666e2a0a0b63b10647b4f64c632f27ecb24f83af01653be9de5e7742578d69b56a89c029ef1e92e4547fa7e9f277601401b355b7d3e260851b74ce100d65b8cd6aca386dd87384c57591f787cc3023fb11bf234cc5e8464c710f4a4bbb0df84483c3e55d50c8f7affdc9476e2016ebf49cbd7b0a938eda48a8d1cf5642854e5f504b6cd361", 0xe5) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000180)={0x40, 0x4, "d17483a44dbb4bedef7bee3c80ed21f278e180b2cab864530c42825b2a070f42", 0x7, 0x6, 0x83, 0x5, 0x248}) 21:16:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x400448c9, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x4, @planes=0x0}) 21:16:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet(0x2, 0x3, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000080)="22404bb413193c321b840d0c83ce226746e44726e17bdcc405eb45fff0f1c92e12f8a69c5c9fb9d3cdb9a0fe135d4dc0b4a43d65de43a8bdd53ed77f8f11dbe1de5bb07b4ac78d24a268c641482f3fd5354169262898bd81d2920e1e89f07653666e2a0a0b63b10647b4f64c632f27ecb24f83af01653be9de5e7742578d69b56a89c029ef1e92e4547fa7e9f277601401b355b7d3e260851b74ce100d65b8cd6aca386dd87384c57591f787cc3023fb11bf234cc5e8464c710f4a4bbb0df84483c3e55d50c8f7affdc9476e2016ebf49cbd7b0a938eda48a8d1cf5642854e5f504b6cd361", 0xe5) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) [ 1925.117205][T17820] ip6_vti0: mtu less than device minimum 21:16:21 executing program 3: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 21:16:21 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:21 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x8914, 0x0) 21:16:21 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @link_local}, 0x8, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) [ 1925.252545][T17829] ip6_vti0: mtu less than device minimum 21:16:21 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x0, 0x0, 0x1, 0x0, "12f5feeac8eecc6459b507925b73f651dc4812b105e3bde04282aa6c9e0fbd4ae34a01dc608fcc85b8cead247e62e9fe587582b6b7bb847980a1bf7c1b07f7d60ccbe62fa324389d39ae65a9a3fb07fc"}, 0xd8) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x40, 0x3, 0x2, 0x200, 0x1, 0xa964, 0xa}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x0, 0x4, {}, {0x0, 0x0, 0xff, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2, @planes=0x0}) 21:16:21 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$inet(0x2, 0x3, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r1, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)="22404bb413193c321b840d0c83ce226746e44726e17bdcc405eb45fff0f1c92e12f8a69c5c9fb9d3cdb9a0fe135d4dc0b4a43d65de43a8bdd53ed77f8f11dbe1de5bb07b4ac78d24a268c641482f3fd5354169262898bd81d2920e1e89f07653666e2a0a0b63b10647b4f64c632f27ecb24f83af01653be9de5e7742578d69b56a89c029ef1e92e4547fa7e9f277601401b355b7d3e260851b74ce100d65b8cd6aca386dd87384c57591f787cc3023fb11bf234cc5e8464c710f4a4bbb0df84483c3e55d50c8f7affdc9476e2016ebf49cbd7b0a938eda48a8d1cf5642854e5f504b6cd361", 0xe5) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:21 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) [ 1925.420589][T17842] ip6_vti0: mtu less than device minimum 21:16:21 executing program 3: setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x7, 0x6a, "98da8862a27f134bd399bba79cc5ba096d887642945bc2707ec9bc125ec52123946555259c1ba3af10ac2497e6810b83179ee8049f405f1a8854ef29926c2ee530d85e0318ad82500ff56093c053dd62cfe0cd077444ac5ed83c8d293f4a877380b2f8abe86b64b8fb82"}, 0x72) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 21:16:21 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$inet(0x2, 0x3, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r1, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:21 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:21 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x109000, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x5, 0x600) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7ff}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="5a000000ee3a584a4fb0961a8042d91e5f3c5f40c1600a7459f6e77130cf190b1e230229be5b3403740c595036ff0e45062d834d1ddacbee542f0446d7bbb08ab672420d9b87d6f7f4145d511e90b24841db6936ee47ab6e38d15124b6f684e2e20c99ec7801b37723cc759e9638f943351e4be21cfdc453e119127530edb5c68c4ff9b6ff851ccfe013fc19c69ce059f06d1fa8f30ad7af9040d40179f930834a417950a175449b356321f320fee20f5cb1ec8de7aededb0533ab68e7d7e6b3568807f7c1cff8f163369ce9424e161c7dd98a0d92f2522177d613fc573e801ffc1922ede3de370ae741e719b5b3f99c38ea641d5e2d3307cd2f3646e1c71af0de07fd45331b4b1ff20c8b89af3e4b799742c3dfdb63575b1f22e46acd42b978c5c0a7cf0fe159dc83096e0a13032e91ea62af64de399dcf5772df87606a5113d4f2ebd4cfc5cc73d68c7510726d08b40ffb09e1e2da41221bf044fc50"], &(0x7f0000000200)=0x62) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xbd, "400535c821f74995e0ddeb35a1ba25b4b7d81de262205727c5279e93f322f749ba9ff116ecb35162d0fa7a8a3558f64b9830dd4b8d9c27c4445e360ae199c7d36003883ace84264a3496debdf7a5cfe6dc3dff56688d639152946ffd882b3d41e5278b6f8c8770d8154bab70d4e2e2bf19a1936ec110d7d94ad16cafb74184d3b7c594c32398f798c5b3815a05ca0e79a57d5f31875b04fae4cd09d3a20ee2f0992c9a5f8e457f73ac335913086cb3e8a5cd4c8aa752af208f85d21f67"}, &(0x7f0000000340)=0xc5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @local}, &(0x7f0000000080)=0xc) 21:16:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x201a, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1925.576603][T17855] FAULT_INJECTION: forcing a failure. [ 1925.576603][T17855] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.612127][T17859] ip6_vti0: mtu less than device minimum [ 1925.622590][T17855] CPU: 0 PID: 17855 Comm: syz-executor.1 Not tainted 5.11.0-rc3-syzkaller #0 [ 1925.631423][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1925.641508][T17855] Call Trace: [ 1925.644809][T17855] dump_stack+0x107/0x163 [ 1925.649169][T17855] should_fail.cold+0x5/0xa [ 1925.653698][T17855] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1925.659454][T17855] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1925.665215][T17855] should_failslab+0x5/0x10 [ 1925.669753][T17855] __kmalloc+0x72/0x3e0 [ 1925.674487][T17855] tomoyo_realpath_from_path+0xc3/0x620 [ 1925.680065][T17855] ? tomoyo_profile+0x42/0x50 [ 1925.684849][T17855] tomoyo_path_number_perm+0x1d5/0x590 [ 1925.690322][T17855] ? tomoyo_path_number_perm+0x18d/0x590 [ 1925.695969][T17855] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1925.701811][T17855] ? lock_downgrade+0x6d0/0x6d0 [ 1925.706678][T17855] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1925.712312][T17855] ? __fget_files+0x288/0x3d0 [ 1925.717004][T17855] security_file_ioctl+0x50/0xb0 [ 1925.721960][T17855] __x64_sys_ioctl+0xb3/0x200 [ 1925.726652][T17855] do_syscall_64+0x2d/0x70 [ 1925.731339][T17855] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1925.737377][T17855] RIP: 0033:0x45e219 [ 1925.742180][T17855] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1925.762424][T17855] RSP: 002b:00007f41668e6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:16:22 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$inet(0x2, 0x3, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:22 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:22 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @window={0x3, 0xd1, 0x9}, @timestamp, @timestamp, @mss={0x2, 0x7fffffff}, @mss={0x2, 0x400}, @timestamp, @sack_perm, @window={0x3, 0x8001, 0x1}, @window={0x3, 0x5ee, 0x5}], 0xa) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000240)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1925.771063][T17855] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1925.779468][T17855] RDX: 0000000020000100 RSI: 0000000000005421 RDI: 0000000000000003 [ 1925.788190][T17855] RBP: 00007f41668e6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.796821][T17855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1925.805149][T17855] R13: 00007ffe6ed738bf R14: 00007f41668e79c0 R15: 000000000119bf8c 21:16:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x100000, 0x3, {}, {0x3, 0x8, 0x7, 0x80, 0xfc, 0x77, "b4f14042"}, 0x2, 0x2, @userptr=0x48, 0x8000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0xfffffffc, 0x0, 0x4, 0x0, 0x8, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "cc01ff61"}, 0x2, 0x0, @offset=0x1ff, 0x20, 0x0, r1}) [ 1925.831340][T17855] ERROR: Out of memory at tomoyo_realpath_from_path. 21:16:22 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:22 executing program 5: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:22 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, 0x0) [ 1925.897030][T17875] ip6_vti0: mtu less than device minimum 21:16:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x80000000, 0x3, 0x3, 0x1, 0x356f4321, 0x6, 0x6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_usb_connect(0x3, 0x611, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x5, 0x90, 0xab, 0x8, 0xe20, 0x101, 0x7063, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ff, 0x3, 0x2, 0x8, 0x20, 0x1, [{{0x9, 0x4, 0xf2, 0x1, 0xc, 0x25, 0xd, 0xb4, 0x2, [], [{{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x20, 0x81, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x1f, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x20, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xe3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xf}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x7, 0x5, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x5, 0x34, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x20, 0x1f, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}, @generic={0x68, 0x22, "5de107a6f1d7065f8324654eea9ed021ca78f2475d1f4a3813d3475ed8ebb2e57ad69c78eecb8639bff05da7d913e873414085415f85118f0759864382489e4b4346aa7d6095fa98e0b91f1a7d5be72fd2a5cb6e9faf2699a040022b0007197a3a609f4ee85c"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x6, 0x3, 0xfb}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x2, 0x5, 0xfd}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x81, 0xb6, 0xa3}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x93, 0x16, 0x0, [@generic={0xec, 0x6, "b06b0c1bcb213614cd42a360c32c74508e7a559322bc1f92d6f277bdffddc4bd87138b52045aa002e6447c5acc9ed47953ba8b0677f4d5604208b8ef9a0971a710c1317099dea0409293a7ccc2d115febbd81524bc6006a9ae1af9a9d576033b88d2882e0761c6311dd7d28242d781d4eb30ebff493ac599616ebfda714720234b4b1bfa08e8e217c9b8ba0cdbc31a0f7a23c96e01868ac2eed809e455681eddc314e0e993c1ee48b12c30173d72c65f4bd55912afd375e7a76d5c43e751d3629a5b4e7afb058fbf26ac4e03d24e49fbc23f40702b051a466c926c6764bdaf2ce7ebae47f83db7205202"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x95, 0x4}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x1f, 0xff, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xed, 0xc35b}]}}]}}, {{0x9, 0x4, 0x2, 0x1f, 0x3, 0x64, 0xcf, 0xe5, 0x54, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "3732c3f8c0db"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfaa3, 0x9, 0x5, 0x1}}, @generic={0xb0, 0x8, "34f793aaf3e5bace5ded6631a8d861fcd900d7cba381eaf9cc027319686a66f725364a576331310d318f5ba991ad370aa7186aefd66d9702478c73dcfbf30deb74a29d874e811480c920c6fa365f72005420cca5ac6e9f313c6fbf5556a15b27aaa21ce5ea8368fe2ed368ea6d4a5b8d1eef95b713a6d02e2bb3a31b14aa115ee269994f74a8331f5d0ad479f3a9f732543685e94e204105722ad2eaf56649a7d04acbed534d9e20ecba9223e224"}], [{{0x9, 0x5, 0xe, 0x0, 0x0, 0x1e, 0x2c, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x3f, 0x5, 0x3, [@generic={0x57, 0x6, "d7d5ac688f7f4b612ec28bbf8557f5c9747b9d99ca4250266b6290f5280444d285fb60f09432f479ee5fb8b216fb88038793a8e6fc1cefde6da27ff7bf785fc5f8632b0961deeb692e0bf6d7036a3910323163b64b"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x3f, 0x4, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1f, 0xd49c}, @generic={0x4c, 0x10, "e703657e74f93eb7144a7937f3460a58d74c42f2f3f59376f515533a88710596394fb315768ebcf913e59004bf72ef897329da10a7846e00f6b776670646e9fdcaeb31aecdc33e2c7564"}]}}]}}, {{0x9, 0x4, 0x8a, 0xfa, 0xa, 0x3, 0x6, 0x4f, 0xa4, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xffff, 0x1, 0x7, "53d33f866250"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3e0, 0x6, 0x5, "8bd67b7a78d02d"}, @as_header={0x7, 0x24, 0x1, 0x71, 0x0, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x4, 0x80}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0x4, "55d808"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x64, 0x1}]}], [{{0x9, 0x5, 0x0, 0xc, 0x20, 0x63, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xfffc}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xe0, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0xfa, 0x5, 0x4}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x7, 0x8, 0xff}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x5, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4b, 0x3}, @generic={0x2a, 0x3, "8708388607cfd28767f62bf3899f4ba27ccf0a5c0efabd8eb26b533e50cfae84034465b1aee2a8fc"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x6, 0x3f, 0x0, [@generic={0x5a, 0x1, "1c3048304c198f96c44eee4187b2d42f543dfa8b4384eedfdb88b041bebffdfcdf565d16a48b70d405ab9ae3c67f9bb11b8f08003f8e985b01d6cf404023e0c28cfab83f7a2dcad10877f37188cfee72d819558a27652a27"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3f, 0x1, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}, @generic={0x29, 0x24, "a0937f7e3b44ce9acbb4f005df98ae3bc214ce9e948283509dc9feff4c458f6de632749fa7d0b1"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x48, 0x7, 0x8}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x3, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfc, 0x5}, @generic={0xef, 0x5, "0486f7ddcd123669521d87ac9e43bca5f338718a137f04c410028ab87083237b37b952e316627e52fc9782eac647ab414a922e8960c18713840600d88be31c83c3a4d5ab19c7e5881f94f4083714579e346ab95e32c9d4a355f30c0d267ed4d3c5b91a9aa048152e93d29d574c013cb6c147dcec33c908da8eaef5f750e262aa78f9eeca223dcec7a10541b1165f96171dc10f4e8da4060a6398673721c1ee1809f757099d59bf053d85c836d714262a6c252e67d660dccc38dd431baafc63385684c75847b36bee7651f4f2505519ce0ece6eed8319775333a71557d87f65eb57e3bc61f8fdd558d7ca3ee884"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x1, 0x1, 0x0, 0x10, 0x44}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x415}}]}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_usb_control_io$printer(r1, &(0x7f00000009c0)={0x14, &(0x7f0000000800)={0x20, 0x23, 0x9a, {0x9a, 0x30, "bb2f35125968249a5a4f985d4ee93202c358db8c1445420f738793a151d3626b3d2260449abfc634840f95ca45ed2c604c40ca4e1d48b2bb73092bba513befb08f5d9074490265bd94c69eb513dd5b07a187fb41453596db1d37c1f20d096095fd564d46c8edc55eb241efbffe833a40fafb930f9ad3904019d465ae93a581e99a8a5715ada97595d8f7e28f09d0722e9523b39ac3be73cc"}}, &(0x7f00000008c0)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "75b3eb5a02b68921e2bcae3d8d423f0a3fde9054c6a5374a607f76dd38f11e226919283f7cba1f56863a82047302bcad9b337f858a2c3c6326de35785a500864e37bdcc24be3dd0cff3001240648fd30b459e18c4596400e75c6bcb06d03b45d09b764695a5f8cac58a8cf773acafc99e992ce2c3034bc0a363636d1c3a1b6e4fb8775bf684b13fe9f59c2133898962b0a44e68eb95a19977dd528b2d70b2c4c2fb3740b8d8b5d7da7a87343878e31ba29c6d2cc1220344af51b2da31ce533aa1b156f5e3fbc65fba36760afc18db5ff1b30"}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000a00)={0x40, 0x17, 0xb9, "5c56cf3c7cb0bddaeb87075a49f36214a38af5644c4503500377ccb264a099e7d1bbe7d2c4ac4175aa114c17d3262b4a7e7f9774d9730baee12a7f156e43cbc8074117f3b67f32cb66b236df53aa71cf623d13168b78d33fe7afcdeeedf3e954b1a0eb88995399faaa50aaf7accc8df81dbbbbfa42ada3c7996ef82ed77cde133c19386ee61df0bb4ec3682ae252dbab192cef68d33de76393fbe2c49bfb33912cea1bd27594b3330091c6709c457dc282f0ab6a1e2ebd22f3"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b40)={0x20, 0x0, 0x51, {0x4f, "41f0aadc9fc00c58b63a794a889f6372c0e0ac8d73165a71c054eb49820202257a9c6f8f757c3c7a341cdc1ed8c739ccd0ab3eb2dbe84362de8861866d02ca15b6c52796121d0aab1ab088b61b7d47"}}, &(0x7f0000000bc0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000c00)={0x20, 0x0, 0x1, 0x40}}) [ 1926.027007][T17890] FAULT_INJECTION: forcing a failure. [ 1926.027007][T17890] name failslab, interval 1, probability 0, space 0, times 0 [ 1926.048036][T17888] ip6_vti0: mtu less than device minimum [ 1926.051293][T17890] CPU: 1 PID: 17890 Comm: syz-executor.1 Not tainted 5.11.0-rc3-syzkaller #0 [ 1926.062672][T17890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.072752][T17890] Call Trace: [ 1926.076047][T17890] dump_stack+0x107/0x163 [ 1926.080401][T17890] should_fail.cold+0x5/0xa [ 1926.085032][T17890] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1926.090439][T17890] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1926.095859][T17890] should_failslab+0x5/0x10 [ 1926.100394][T17890] __kmalloc+0x72/0x3e0 [ 1926.104583][T17890] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1926.109917][T17890] tomoyo_encode+0x28/0x50 [ 1926.114352][T17890] tomoyo_realpath_from_path+0x186/0x620 [ 1926.120009][T17890] tomoyo_path_number_perm+0x1d5/0x590 [ 1926.125914][T17890] ? tomoyo_path_number_perm+0x18d/0x590 [ 1926.131836][T17890] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1926.137827][T17890] ? lock_downgrade+0x6d0/0x6d0 [ 1926.142695][T17890] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1926.148262][T17890] ? __fget_files+0x288/0x3d0 [ 1926.153043][T17890] security_file_ioctl+0x50/0xb0 [ 1926.158178][T17890] __x64_sys_ioctl+0xb3/0x200 [ 1926.163790][T17890] do_syscall_64+0x2d/0x70 [ 1926.168406][T17890] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1926.174428][T17890] RIP: 0033:0x45e219 [ 1926.178697][T17890] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1926.198540][T17890] RSP: 002b:00007f41668e6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1926.208208][T17890] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1926.216197][T17890] RDX: 0000000020000100 RSI: 0000000000005421 RDI: 0000000000000003 21:16:22 executing program 5: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:22 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, 0x0) [ 1926.224843][T17890] RBP: 00007f41668e6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1926.233688][T17890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1926.241672][T17890] R13: 00007ffe6ed738bf R14: 00007f41668e79c0 R15: 000000000119bf8c 21:16:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xd4bc, 0x7f, 0x1, 0x1, 0x5, 0x20, 0x3, 0x7f, 0xa94b, 0x4f99, 0x80000001, 0x400, 0x1, 0xb315, 0x18, 0x28, {0x6, 0xc0}, 0x81}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:22 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1926.291954][T17890] ERROR: Out of memory at tomoyo_realpath_from_path. 21:16:22 executing program 5: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x39, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:22 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, 0x0) 21:16:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x3, {0xc0000000, 0x5, 0x1, 0x8}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1926.462496][T17909] FAULT_INJECTION: forcing a failure. [ 1926.462496][T17909] name failslab, interval 1, probability 0, space 0, times 0 [ 1926.487992][T17909] CPU: 0 PID: 17909 Comm: syz-executor.1 Not tainted 5.11.0-rc3-syzkaller #0 [ 1926.496912][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.507003][T17909] Call Trace: [ 1926.510394][T17909] dump_stack+0x107/0x163 [ 1926.514896][T17909] should_fail.cold+0x5/0xa [ 1926.519529][T17909] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1926.525030][T17909] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1926.530456][T17909] should_failslab+0x5/0x10 [ 1926.534997][T17909] __kmalloc+0x72/0x3e0 [ 1926.539184][T17909] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1926.544422][T17909] tomoyo_encode+0x28/0x50 [ 1926.548878][T17909] tomoyo_realpath_from_path+0x186/0x620 [ 1926.554559][T17909] tomoyo_path_number_perm+0x1d5/0x590 [ 1926.560057][T17909] ? tomoyo_path_number_perm+0x18d/0x590 [ 1926.565739][T17909] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1926.571613][T17909] ? lock_downgrade+0x6d0/0x6d0 [ 1926.576496][T17909] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1926.582076][T17909] ? __fget_files+0x288/0x3d0 [ 1926.586790][T17909] security_file_ioctl+0x50/0xb0 [ 1926.591870][T17909] __x64_sys_ioctl+0xb3/0x200 [ 1926.596586][T17909] do_syscall_64+0x2d/0x70 [ 1926.601043][T17909] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1926.606993][T17909] RIP: 0033:0x45e219 21:16:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x1, 0x1, 0x4, 0xe000, 0x8001, {0x77359400}, {0x4, 0xc, 0x5, 0x8, 0xb5, 0x8, "d346493f"}, 0x2, 0x4, @offset=0x5, 0x9, 0x0, r1}) 21:16:22 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) [ 1926.611032][T17909] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1926.630668][T17909] RSP: 002b:00007f41668e6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1926.639195][T17909] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1926.647194][T17909] RDX: 0000000020000100 RSI: 0000000000005421 RDI: 0000000000000003 [ 1926.655186][T17909] RBP: 00007f41668e6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1926.663536][T17909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1926.672423][T17909] R13: 00007ffe6ed738bf R14: 00007f41668e79c0 R15: 000000000119bf8c [ 1926.697217][T17909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1926.698270][ T6448] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1927.028704][ T6448] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1927.036788][ T6448] usb usb4-port1: attempt power cycle [ 1927.690496][ T6448] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1927.998846][ T6448] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1928.006903][ T6448] usb usb4-port1: unable to enumerate USB device 21:16:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:25 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:25 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 21:16:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:25 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x7, {r1, r2/1000+10000}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) 21:16:25 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:25 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0x1, 0x0, 0x2023, 0x5, 0x9, {0xb5b, 0x9}, 0x1}) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) write$bt_hci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="01080406000000000000ce9c10e124a228c80cb7f9a1765b128a454593ecd7fd06679de85997dc7e9043feffe63b27b1be52da69f58c7386a0bdb3dc1ab4c61cb10545aaf8eccae8049151359f5be3a64deba20422100b3cdc87534d82974d99758e2897262a27a302f5e8eeddf3cb72f8bfa3a2c293246f659a6c8420150350b6450164307fe79ad86d84abb6115ceb404d2ecd0e782c0fd2046459fb6191e6f21d3ecac280f7cb6098ca504912f2d7b831abb7d7cdeb7eeed0c253f402c06cf0b5630df8c7fe39d1fcf040a93e7ff71301f6b26ee0f454ace6e887ef73"], 0xa) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0x2, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = socket(0x15, 0xa, 0x2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 21:16:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) [ 1929.150669][T17934] ip6_vti0: mtu less than device minimum [ 1929.161057][T17932] FAULT_INJECTION: forcing a failure. [ 1929.161057][T17932] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:16:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:25 executing program 0: r0 = socket$inet(0x2, 0x0, 0x8) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) [ 1929.219607][T17932] CPU: 0 PID: 17932 Comm: syz-executor.1 Not tainted 5.11.0-rc3-syzkaller #0 [ 1929.228458][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1929.238665][T17932] Call Trace: [ 1929.241969][T17932] dump_stack+0x107/0x163 [ 1929.246440][T17932] should_fail.cold+0x5/0xa [ 1929.250992][T17932] _copy_from_user+0x2c/0x180 [ 1929.256064][T17932] kstrtouint_from_user+0xb5/0x240 [ 1929.261229][T17932] ? kstrtou8_from_user+0x210/0x210 21:16:25 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000240)={0x2, 0xb, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x8201, 0x0) socket$inet(0x2, 0x3, 0x7fffffff) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000100)={0x8, 0x8001, @value}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/vmallocinfo\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x8}, &(0x7f0000000480)=0x8) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f00000014c0)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x80100, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f00000004c0)={0x4, 0x5, 0x200, 0x20, 0x200, 0xee}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x8, 0x0, 0x3, 0x8, 0x26, 0x6, 0x9}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r6, 0x8}, &(0x7f0000000400)=0x8) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0xfff, 0x6, 0x2, 0x100, 0xffff, {}, {0x5, 0x8, 0x6, 0x62, 0x1, 0xfc, "4a64f8c2"}, 0x804, 0x3, @offset=0x9, 0x5, 0x0, r3}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000500)={r7, 0x1f, 0x456}, 0x8) [ 1929.266548][T17932] proc_fail_nth_write+0x79/0x220 [ 1929.271590][T17932] ? proc_task_getattr+0x1e0/0x1e0 [ 1929.277886][T17932] ? proc_task_getattr+0x1e0/0x1e0 [ 1929.283012][T17932] vfs_write+0x28e/0xa30 [ 1929.288316][T17932] ksys_write+0x12d/0x250 [ 1929.293160][T17932] ? __ia32_sys_read+0xb0/0xb0 [ 1929.297940][T17932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1929.303854][T17932] do_syscall_64+0x2d/0x70 [ 1929.309462][T17932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1929.315369][T17932] RIP: 0033:0x417ab1 [ 1929.319275][T17932] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1929.339714][T17932] RSP: 002b:00007f41668e6c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1929.348343][T17932] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417ab1 [ 1929.356304][T17932] RDX: 0000000000000001 RSI: 00007f41668e6cb0 RDI: 0000000000000004 [ 1929.364262][T17932] RBP: 00007f41668e6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.372225][T17932] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1929.380271][T17932] R13: 00007ffe6ed738bf R14: 00007f41668e79c0 R15: 000000000119bf8c 21:16:25 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:25 executing program 3: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x7fff, 0x8, 0x4, 0x0, 0x1, {}, {0x3, 0x1, 0x5, 0x0, 0x3f, 0x3, "ce9dbed9"}, 0x3, 0x1, @offset=0x6, 0x73cc, 0x0, r0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x193a00, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x40, 0x3, 0x4, 0x10000, 0x5, {r2, r3/1000+60000}, {0x4, 0x2, 0x1f, 0xe0, 0x86, 0x0, "8de4b3e2"}, 0x3, 0x0, @offset=0x3, 0x3}) 21:16:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:25 executing program 4: ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000000c0)={0x3, 0x1, 0x3, {0x4, 0x82, 0x9, 0x3ff}}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x8, "7be5e97aee361d8f717b2fdea8d77d13630c674b8131f2a8bf0caf60f20c6030", 0x3, 0x2e, 0x4, 0x40004, 0x0, 0x2}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000480)) r2 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000002c0)={0x2, 0x102, 0x4, {0x2, 0x1, 0xe670, 0xe9a1}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, {0x3, 0x10001, 0xaba1, 0xb7}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x8, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000380)={0xffff, "8a4b05c428519ebec3cea6c6596de27abc5b3e07eff10d32a3fa5471f69ee918", 0x3, 0x5, 0x2, 0x400000, 0x2000220, 0x4}) 21:16:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:26 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0xffffffff, @value=0xfffffffffffffffe}) 21:16:26 executing program 0: r0 = socket$inet(0x2, 0x0, 0x8) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:26 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:26 executing program 3: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)={0x1, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc017c61"}, 0x0, 0x0, @planes=0x0, 0x3}) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x1, 0x80000001, 0x20, 0x1, 0x7b, 0x2}) 21:16:26 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x10, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0xfffffffffffffffe}) 21:16:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0xffffff7f, 0x101, @name="7fd17be8a38b2bad8abcceaa8f6393afb4dcb568769c7922534baf59b7bfc0cf"}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xffff}) 21:16:26 executing program 0: r0 = socket$inet(0x2, 0x0, 0x8) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:26 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:26 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x4c01, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:26 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x5, 0x1, 0x3, 0xc5, 0x8, 0x1ff, 0x4, 0x8, 0x3, 0xf5b, 0xffff, 0x4, 0x5, 0x5, 0x8, {0x101, 0x7}, 0x1, 0x6}}) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x0, 0x6, {0x3, 0x8, 0x9, 0xe5}}) 21:16:26 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x8dfb, 0x2, 0x4, 0x1000, 0x100, {r2, r3/1000+60000}, {0x5, 0x2, 0x80, 0x2, 0x20, 0x1f, "e3b02c9c"}, 0x4, 0x4, @userptr=0xff, 0xffff}) 21:16:26 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1929.957001][T17996] FAULT_INJECTION: forcing a failure. [ 1929.957001][T17996] name failslab, interval 1, probability 0, space 0, times 0 21:16:26 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:26 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x2, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1930.023368][T17996] CPU: 1 PID: 17996 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1930.032200][T17996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1930.042277][T17996] Call Trace: [ 1930.045565][T17996] dump_stack+0x107/0x163 [ 1930.049910][T17996] should_fail.cold+0x5/0xa [ 1930.054458][T17996] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1930.060193][T17996] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1930.065940][T17996] should_failslab+0x5/0x10 [ 1930.069319][T18006] FAULT_INJECTION: forcing a failure. [ 1930.069319][T18006] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.070471][T17996] __kmalloc+0x72/0x3e0 [ 1930.070500][T17996] tomoyo_realpath_from_path+0xc3/0x620 [ 1930.070531][T17996] ? tomoyo_profile+0x42/0x50 [ 1930.098180][T17996] tomoyo_path_number_perm+0x1d5/0x590 [ 1930.105001][T17996] ? tomoyo_path_number_perm+0x18d/0x590 [ 1930.111614][T17996] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1930.118083][T17996] ? lock_downgrade+0x6d0/0x6d0 [ 1930.122949][T17996] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1930.128604][T17996] ? __fget_files+0x288/0x3d0 [ 1930.133296][T17996] security_file_ioctl+0x50/0xb0 [ 1930.138249][T17996] __x64_sys_ioctl+0xb3/0x200 [ 1930.142939][T17996] do_syscall_64+0x2d/0x70 [ 1930.147395][T17996] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1930.155261][T17996] RIP: 0033:0x45e219 [ 1930.159166][T17996] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1930.178821][T17996] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1930.187248][T17996] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1930.196105][T17996] RDX: 0000000020000100 RSI: 0000000000005421 RDI: 0000000000000003 [ 1930.204176][T17996] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1930.213280][T17996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1930.221265][T17996] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c [ 1930.238930][T18006] CPU: 0 PID: 18006 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 1930.247985][T18006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1930.253834][T17996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1930.258072][T18006] Call Trace: [ 1930.258081][T18006] dump_stack+0x107/0x163 [ 1930.258111][T18006] should_fail.cold+0x5/0xa [ 1930.258129][T18006] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1930.283133][T18006] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1930.288878][T18006] should_failslab+0x5/0x10 [ 1930.293394][T18006] __kmalloc+0x72/0x3e0 [ 1930.297734][T18006] tomoyo_realpath_from_path+0xc3/0x620 [ 1930.304280][T18006] ? tomoyo_profile+0x42/0x50 [ 1930.311087][T18006] tomoyo_path_number_perm+0x1d5/0x590 [ 1930.316949][T18006] ? tomoyo_path_number_perm+0x18d/0x590 [ 1930.323823][T18006] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1930.329865][T18006] ? lock_downgrade+0x6d0/0x6d0 [ 1930.337080][T18006] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1930.343124][T18006] ? __fget_files+0x288/0x3d0 [ 1930.347837][T18006] security_file_ioctl+0x50/0xb0 [ 1930.353855][T18006] __x64_sys_ioctl+0xb3/0x200 [ 1930.358567][T18006] do_syscall_64+0x2d/0x70 [ 1930.364291][T18006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1930.370205][T18006] RIP: 0033:0x45e219 [ 1930.374629][T18006] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1930.394255][T18006] RSP: 002b:00007f2086627c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1930.402692][T18006] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1930.410677][T18006] RDX: 0000000020000140 RSI: 00000000c02c5625 RDI: 0000000000000003 21:16:26 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:26 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5450, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:26 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x577, 0x5, 0x4, 0x2000, 0xd832, {0x77359400}, {0x2, 0xc, 0x9, 0xff, 0x5, 0x62, "9d14d448"}, 0x5, 0x2, @fd=r1, 0x4}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040)) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f00000000c0)={0x6, 0x0, 0x200e, 0x7, 0xc7, {0x1000, 0x74b}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1930.418657][T18006] RBP: 00007f2086627ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1930.426720][T18006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1930.435085][T18006] R13: 00007ffca295911f R14: 00007f20866289c0 R15: 000000000119bf8c [ 1930.459704][T18006] ERROR: Out of memory at tomoyo_realpath_from_path. 21:16:26 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x20, 0xd2, {0x0, 0xea60}, {0x144050bd4b91e962, 0x0, 0x8, 0x12, 0xcc, 0x40, "9001154f"}, 0x8, 0x4, @fd, 0x724, 0x0, r1}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x8000, 0xa, 0x4, 0x4, 0xe38a, {}, {0x4, 0x8, 0xed, 0x9, 0xff, 0x80, "132134ac"}, 0x9, 0x2, @userptr=0x72b4543f, 0x0, 0x0, r2}) [ 1930.525780][T18018] FAULT_INJECTION: forcing a failure. [ 1930.525780][T18018] name failslab, interval 1, probability 0, space 0, times 0 21:16:27 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000180)={0x40000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) [ 1930.585344][T18018] CPU: 1 PID: 18018 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1930.594250][T18018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1930.604415][T18018] Call Trace: [ 1930.607692][T18018] dump_stack+0x107/0x163 [ 1930.612028][T18018] should_fail.cold+0x5/0xa [ 1930.616541][T18018] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1930.621927][T18018] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1930.627311][T18018] should_failslab+0x5/0x10 [ 1930.631847][T18018] __kmalloc+0x72/0x3e0 21:16:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x7f, 0x517400) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000300)={0x5, 0x2, 0x3, {0x40, 0x0, 0x80, 0x9a4d}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0xfffffffa, 0x0, [], {0x0, @reserved}}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r5 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000000380)={0x0, 0x0, {0x6, 0xef, 0x3013, 0x6, 0xb, 0x3, 0x2, 0x1}}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000280)={0x3, 0x1, 0x4, {0x1, 0x80000001, 0xffffffff, 0x4}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000240)={0x3, 0xfffffff9, @value=0x6}) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000480)={0x18, 0x0, 0x0, 0xd6e}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000180)={0x3, 0x2, 0x4, 0x4000, 0x0, {0x0, 0xea60}, {0x1, 0x2, 0x4, 0x4, 0x9, 0x1, "42d23e96"}, 0x2, 0x2, @userptr=0x52, 0x5, 0x0, r2}) [ 1930.636028][T18018] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1930.641241][T18018] tomoyo_encode+0x28/0x50 [ 1930.645668][T18018] tomoyo_realpath_from_path+0x186/0x620 [ 1930.651314][T18018] tomoyo_path_number_perm+0x1d5/0x590 [ 1930.657156][T18018] ? tomoyo_path_number_perm+0x18d/0x590 [ 1930.662807][T18018] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1930.668703][T18018] ? lock_downgrade+0x6d0/0x6d0 [ 1930.673553][T18018] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1930.679796][T18018] ? __fget_files+0x288/0x3d0 [ 1930.685115][T18018] security_file_ioctl+0x50/0xb0 [ 1930.690423][T18018] __x64_sys_ioctl+0xb3/0x200 [ 1930.695301][T18018] do_syscall_64+0x2d/0x70 [ 1930.700137][T18018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1930.706024][T18018] RIP: 0033:0x45e219 [ 1930.709965][T18018] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:16:27 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5451, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1930.729562][T18018] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1930.737963][T18018] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1930.745934][T18018] RDX: 0000000020000100 RSI: 0000000000005421 RDI: 0000000000000003 [ 1930.753889][T18018] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1930.761844][T18018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1930.769800][T18018] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c [ 1930.792782][T18018] ERROR: Out of memory at tomoyo_realpath_from_path. 21:16:27 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:27 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:27 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1930.834298][T18036] FAULT_INJECTION: forcing a failure. [ 1930.834298][T18036] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.900538][T18036] CPU: 0 PID: 18036 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 1930.909551][T18036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1930.919611][T18036] Call Trace: [ 1930.922886][T18036] dump_stack+0x107/0x163 [ 1930.927231][T18036] should_fail.cold+0x5/0xa [ 1930.931819][T18036] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1930.937203][T18036] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1930.943237][T18036] should_failslab+0x5/0x10 [ 1930.947812][T18036] __kmalloc+0x72/0x3e0 [ 1930.951969][T18036] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1930.957961][T18036] tomoyo_encode+0x28/0x50 [ 1930.962557][T18036] tomoyo_realpath_from_path+0x186/0x620 [ 1930.968478][T18036] tomoyo_path_number_perm+0x1d5/0x590 [ 1930.974241][T18036] ? tomoyo_path_number_perm+0x18d/0x590 [ 1930.980173][T18036] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1930.986058][T18036] ? lock_downgrade+0x6d0/0x6d0 [ 1930.991801][T18036] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1930.997643][T18036] ? __fget_files+0x288/0x3d0 [ 1931.003484][T18036] security_file_ioctl+0x50/0xb0 [ 1931.009535][T18036] __x64_sys_ioctl+0xb3/0x200 [ 1931.015265][T18036] do_syscall_64+0x2d/0x70 [ 1931.019758][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1931.026516][T18036] RIP: 0033:0x45e219 [ 1931.030782][T18036] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1931.051002][T18036] RSP: 002b:00007f2086627c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.059738][T18036] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1931.068342][T18036] RDX: 0000000020000140 RSI: 00000000c02c5625 RDI: 0000000000000003 [ 1931.077031][T18036] RBP: 00007f2086627ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.085793][T18036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:16:27 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0xffffffff, 0x0, 0x4, 0x0, 0x40, {0x0, 0xea60}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "000400"}, 0x0, 0x0, @planes=0x0, 0x9}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2c0000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}], 0x3c) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x5, {0x100000, 0x6, 0x6}}) 21:16:27 executing program 4: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000000)={0x6, 0x0, 0x3001, 0x2, 0x60000000, {0xffff, 0x58e}}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x800, 0x100, {0x0, 0xea60}, {0x2, 0x0, 0x4, 0xfa, 0x8, 0x2, 'jmft'}, 0x6d, 0x2, @userptr=0x6, 0x4}) [ 1931.094635][T18036] R13: 00007ffca295911f R14: 00007f20866289c0 R15: 000000000119bf8c 21:16:27 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x5, 0x1008}) 21:16:27 executing program 0: socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) [ 1931.184631][T18052] FAULT_INJECTION: forcing a failure. [ 1931.184631][T18052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.198756][T18052] CPU: 0 PID: 18052 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1931.207722][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.217793][T18052] Call Trace: [ 1931.221080][T18052] dump_stack+0x107/0x163 [ 1931.224881][T18036] ERROR: Out of memory at tomoyo_realpath_from_path. 21:16:27 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:27 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5460, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1931.225421][T18052] should_fail.cold+0x5/0xa [ 1931.236583][T18052] _copy_to_user+0x2c/0x150 [ 1931.241915][T18052] simple_read_from_buffer+0xcc/0x160 [ 1931.248618][T18052] proc_fail_nth_read+0x187/0x220 [ 1931.253671][T18052] ? proc_exe_link+0x1d0/0x1d0 [ 1931.258454][T18052] ? security_file_permission+0x248/0x560 [ 1931.264303][T18052] ? proc_exe_link+0x1d0/0x1d0 [ 1931.270455][T18052] vfs_read+0x1b5/0x570 [ 1931.275101][T18052] ksys_read+0x12d/0x250 [ 1931.279452][T18052] ? vfs_write+0xa30/0xa30 [ 1931.284623][T18052] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1931.290808][T18052] do_syscall_64+0x2d/0x70 [ 1931.295411][T18052] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1931.301422][T18052] RIP: 0033:0x417b11 [ 1931.305420][T18052] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1931.326041][T18052] RSP: 002b:00007f4e0b43ec70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 21:16:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x80000000, 0x3007, 0x9, 0x2, 0x2, 0x1, 0x7}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x4000, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @userptr=0xb3}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x1, [], &(0x7f0000000040)=0x2}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x6, 0x4) 21:16:27 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x6364, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1931.334942][T18052] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417b11 [ 1931.342929][T18052] RDX: 000000000000000f RSI: 00007f4e0b43ecb0 RDI: 0000000000000004 [ 1931.351091][T18052] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.359260][T18052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1931.367336][T18052] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c 21:16:27 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @userptr=0x80000001, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0xf5, 0x5, 0x4, 0x4400, 0x4, {}, {0x3, 0xc, 0x8, 0xc0, 0x1, 0x2, 'q-K5'}, 0x2, 0x6, @offset=0x1, 0x400, 0x0, r1}) 21:16:27 executing program 0: socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) [ 1931.452981][T18066] FAULT_INJECTION: forcing a failure. [ 1931.452981][T18066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.485744][T18066] CPU: 0 PID: 18066 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 1931.495133][T18066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.505635][T18066] Call Trace: [ 1931.508923][T18066] dump_stack+0x107/0x163 [ 1931.513450][T18066] should_fail.cold+0x5/0xa [ 1931.518154][T18066] _copy_from_user+0x2c/0x180 [ 1931.522969][T18066] video_get_user+0x844/0x9b0 [ 1931.527673][T18066] ? v4l_g_crop+0x380/0x380 [ 1931.532191][T18066] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1931.538029][T18066] ? subdev_do_ioctl+0x3050/0x3050 [ 1931.543164][T18066] video_usercopy+0xfc9/0x12d0 21:16:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:27 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x21, 0x10100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x15e5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="900000cc6acf0b9339c7b2d3bbf5921a9a867522be9967ae95554f3d0dae9bb138037b384ecd1b96609e273f1a149bfcfc942894311debc8b82bab747bbd0b3785affef3bc818db4e99ce5d66de33384a5a8895bac6a97dba7efaea4bf7c22caf3dc46481b9de56bef2aafaeb3178b51af0be7ec03b90cf10227eb09623f8fa5c0ce8ab28613f6143c34fabda4e9febafd49b8f542eba181f068dae700000000000000000000b58a850e35e65c5c9e752ce4a03da8955b9a842bba9e424a9310743aba88289a770c001c864994253a8990ae981bfbc9b35d7c8e235eb93e90067b3789fdd5b646f89e95b551b24b5ed5473461fdf9"], &(0x7f0000000240)=0x98) socketpair(0x1a, 0x4, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000002c0), 0x1) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r3, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:27 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x149200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) [ 1931.548052][T18066] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1931.553959][T18066] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1931.560236][T18066] ? v4l_enumstd+0x60/0x60 [ 1931.564694][T18066] ? __generic_block_fiemap+0x730/0x740 [ 1931.570338][T18066] ? lock_downgrade+0x6d0/0x6d0 [ 1931.575199][T18066] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1931.580932][T18066] ? __fget_files+0x288/0x3d0 [ 1931.585620][T18066] v4l2_ioctl+0x1b3/0x250 [ 1931.589962][T18066] ? v4l2_prio_init+0x20/0x20 [ 1931.594646][T18066] __x64_sys_ioctl+0x193/0x200 [ 1931.599423][T18066] do_syscall_64+0x2d/0x70 21:16:28 executing program 4: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r4, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x20, 0x1, {r0, r1/1000+60000}, {0x1, 0x8, 0xff, 0x68, 0x6c, 0x97, "b30e11c3"}, 0x40, 0x3, @userptr=0x1f, 0x8, 0x0, r2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @multicast2}, &(0x7f0000000640)=0xc) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in=@remote, 0x4e20, 0x80, 0x4e22, 0x4, 0xa, 0x80, 0x60, 0x73, r6, 0xffffffffffffffff}, {0x3e000, 0xffffffffffffff9e, 0x8, 0x81, 0x7fff, 0x9, 0x6, 0x191}, {0x800, 0x7f, 0x800, 0xfffffffff79b50fa}, 0x7fff, 0x6e6bb1, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3500, 0x0, 0x0, 0x40, 0x8000, 0x7fff, 0x4}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e24, 0x1, 0x4e23, 0xffe9, 0xa, 0x0, 0x0, 0x5c, r6, 0xee00}, {0xffffffffffffffff, 0x9, 0x6, 0xfbc, 0x401, 0x3, 0x6, 0x3}, {0xffffffff, 0x7, 0x1, 0x88}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x1, 0x2}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x0, 0x1, 0x3, 0x7f, 0x71ca, 0x40, 0x9}}, 0xe8) 21:16:28 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x8913, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1931.603841][T18066] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1931.609742][T18066] RIP: 0033:0x45e219 [ 1931.613724][T18066] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1931.634066][T18066] RSP: 002b:00007f2086627c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.642499][T18066] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 21:16:28 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x8914, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1931.650494][T18066] RDX: 0000000020000140 RSI: 00000000c02c5625 RDI: 0000000000000003 [ 1931.658489][T18066] RBP: 00007f2086627ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.666487][T18066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1931.674486][T18066] R13: 00007ffca295911f R14: 00007f20866289c0 R15: 000000000119bf8c 21:16:28 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc079f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 0: socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x6, 0x7, 0x4, 0x400, 0x1, {0x77359400}, {0x3, 0x0, 0x1, 0x65, 0xf0, 0x20, "66be81a6"}, 0x3, 0x1, @fd, 0x240, 0x0, r1}) 21:16:28 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @offset=0x9}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x1000, 0x763ceb63, {}, {0x2, 0x2, 0x9, 0x1f, 0x4, 0x20, "e5935c0f"}, 0x8, 0x3, @planes=&(0x7f0000000040)={0x40, 0x6e, @userptr=0x4, 0x5}, 0x7}) 21:16:28 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x8933, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x400, 0x4) 21:16:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x5, 0xe2, 0x4, 0x2, 0x4, 0xd10, 0x4, 0x5fa, 0x8000, 0x4, 0x3, 0xee4, 0x3ff, 0x8850, 0x3, 0x9827, 0x294, 0xb8, 0x51, 0x5, 0x7, 0x2, 0x7, 0x3, 0x3, 0x2b3, 0x9, 0x8001, 0x4, 0x2, 0x0, 0x9]}) [ 1931.887079][T18098] FAULT_INJECTION: forcing a failure. [ 1931.887079][T18098] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:16:28 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) 21:16:28 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x400448c9, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1931.972389][T18098] CPU: 0 PID: 18098 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 1931.981305][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.991368][T18098] Call Trace: [ 1931.994645][T18098] dump_stack+0x107/0x163 [ 1931.998985][T18098] should_fail.cold+0x5/0xa [ 1932.003496][T18098] _copy_to_user+0x2c/0x150 [ 1932.008013][T18098] simple_read_from_buffer+0xcc/0x160 [ 1932.013394][T18098] proc_fail_nth_read+0x187/0x220 21:16:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x3, 0x401, 0x1, 0x1, 0x45, 0x0, 0x3, 0x0, 0x4, 0x8, 0x3, 0x9155, 0xde, 0x6, 0x8, 0x9, {0x200, 0x1}, 0x3, 0x9}}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x4, 0x2, 0x4, 0x814, 0x0, {r2, r3/1000+60000}, {0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, "ccd89052"}, 0x0, 0x0, @planes=0x0}) [ 1932.018428][T18098] ? proc_exe_link+0x1d0/0x1d0 [ 1932.023196][T18098] ? security_file_permission+0x248/0x560 [ 1932.028928][T18098] ? proc_exe_link+0x1d0/0x1d0 [ 1932.033695][T18098] vfs_read+0x1b5/0x570 [ 1932.037859][T18098] ksys_read+0x12d/0x250 [ 1932.042109][T18098] ? vfs_write+0xa30/0xa30 [ 1932.046621][T18098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1932.052529][T18098] do_syscall_64+0x2d/0x70 [ 1932.056944][T18098] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1932.062842][T18098] RIP: 0033:0x417b11 [ 1932.067211][T18098] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1932.087794][T18098] RSP: 002b:00007f2086627c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1932.096792][T18098] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 1932.105566][T18098] RDX: 000000000000000f RSI: 00007f2086627cb0 RDI: 0000000000000004 [ 1932.114343][T18098] RBP: 00007f2086627ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1932.123172][T18098] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1932.131898][T18098] R13: 00007ffca295911f R14: 00007f20866289c0 R15: 000000000119bf8c 21:16:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x2, 0xfff, [], &(0x7f0000000040)=0x6}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000240)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000280)={0x9, 0x0, 0x1015, 0x7, 0x1000, {0x4, 0xfffffffd}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r3, 0x80, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast1}, 0x2, 0x3, 0x2, 0x1}}}, 0x757) 21:16:28 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x400448dd, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2b, 0x200) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x2, "ad7aa10edafd5977ba9c82ebbd512c6e61f100a66c17201b52b2f45879aed94b", 0x3, 0x1, 0x4, 0xb700, 0x801, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:28 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) r2 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x2, 0x8001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)={0x2, 0xc, 0x4, 0x100000, 0x6, {0x77359400}, {0x4, 0x8, 0x3b, 0xd6, 0x1f, 0x3, "d89de475"}, 0x200, 0x2, @fd=r3, 0x9}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x100000001, 0x8002) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x2, 0xb, 0x4, 0x0, 0x3, {0x0, 0xea60}, {0x1, 0xc, 0x7b, 0x3f, 0x7f, 0x8a, "b14abaa6"}, 0x7fffffff, 0x3, @userptr=0x8, 0x9a5f, 0x0, r4}) r6 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x410000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000180)={0x6, 0x102, 0x1, {0x400, 0x5, 0x9, 0x4b24}}) 21:16:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:28 executing program 2: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:28 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x400454ca, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue}) 21:16:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x10, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000180)={0xff, 0x0, [], {0x0, @bt={0x381, 0x7fff, 0x1, 0x1, 0x1000, 0x8, 0xfffffff9, 0xfd3, 0x9, 0x200, 0x9, 0x7ff, 0x181e47ce, 0x2, 0x14, 0x0, {0x4, 0x200}}}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000040)) 21:16:28 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x40049409, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x800, 0x0, {}, {0x0, 0x0, 0x0, 0x40, 0x4, 0x0, "cc019f61"}, 0x2, 0x0, @planes=0x0}) 21:16:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x8922, 0x0) 21:16:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4c01, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:29 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x40186366, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x4, 0x5, @value=0x2}) 21:16:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x3, 0xd3, @name="71dec97ba6c12a802a20dbd62ee64ba31ffd9fb781d0194bede845f42c566ce6"}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x1ff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x8, 0x2, {}, {0x5, 0x2, 0x7f, 0x2, 0x1, 0x8, "5e1c92cd"}, 0x400, 0x4, @userptr, 0x1000}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)={0x101, 0x2, 0x4, 0x10, 0x4413046d, {0x0, 0x2710}, {0x3, 0x0, 0x3, 0x91, 0x8, 0xf7, "cbbe40a1"}, 0x8000, 0x3, @offset=0x5, 0x1, 0x0, r2}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 21:16:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x8922, 0x0) 21:16:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x541b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r2, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x4007, @fd=r2, 0x6, &(0x7f0000000380)=[{&(0x7f0000000180)="4916f67ed7bccf39736f2b90e514bab985e836976b641bc64a02273a0d66ce32c9f6606027588d0dab2c90922550935f5bf1114713b479959f85ad7667d75e0bff2195956bef1171e9b696ab0018b015669d650886892bc1254fd3ff13942f6a5e13f63ff5247650ba74f39eeed9bede6dcb94189c542593f368524d39a08940a1ad838d6a848332030e9e91d5e9d7529b3c44fe4cf128053766f5ad626c87afd9097c003219cb726718ec9258a392403da4a3de2d09d168606f5b973b43bdb6b0d169ac0b51d498f91a21fd4899c528f4f7011f06", 0xd5}, {&(0x7f0000000040)="9f88e1b483e67f0fa09f877ce28f49086f0999673f1240e86a40b39ef6954314b2d0b23330c89fdef04573ea95a2731c7e7924b6c072536ee2f819ccf4f48bb704dd8c7cd81a27301cf2246bbfff96c0e77f1716076a101c1ace930b8cbfb3f2b163ec5cdfd4b1de331c301859b6ae1f0de7d40740589aba95229ef2b79ab2b42cb250fe36326c6c802a12903bf980d088aa12e497be98da24bd27c2ef06a017aa8f042cf38093b905e6f0a3d3", 0xad}, {&(0x7f0000000280)="65ac5075a6317e2b69710e98e7b4ae7be3298f071a1edae91a6dab21eccd3c750021ede10a50380aee12878702992a2cfb9304707430ed9ed187ebbd7d8d6d2b54fa4135b1f9defdc8cb29751497b0de4e8e4dbd957a011b47247cd3a28ae8cdfaf4835419945bfc68e096cf34b0cad77384f930b0647c63e0dbde54c8a5f4616085bf64b573c76469e88b6f5e4e136129f581e3429e0373c74da5724e67dad6cfc6964188f654fc56a16bede1a292a419bfc404b6a95a911ffbf6c175bd903e599f4598236dc7846df80b30f5119cd012186bd0b12a2de3d08ba076af86d3252457423613f1ebf254b7c17df457c0cbd2", 0xf1}], 0x3, 0x1, 0x1, {0x1}}, 0x6) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x6, 0x4, 0x0, 0x4, {}, {0x0, 0xc, 0x0, 0x0, 0x7, 0x20, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000540)=@buf={0xd5, &(0x7f0000000440)="3a3980aa4b5894fa97cab3ecec1f22a66ccd9c578b22c9c5ca902033efa1e6c0a0433406e5e0c8e8002232ef601651d343a5ba0784ba0c5d9a0e55d0bb1cfaa8732a7835d39496c132e60c7b4bf2c97d08c7f76ac86dab0d95157a5fb07a19270805f59cdd1d4e7d2aab02aeb2270417f691c4d1d29aed57b8d1430f0cd27561c24bb7cae1e2a0d2682d1a4936cf2b43049810dbe957956a3b3ed803b1d41a503a2108e57922807c8b17a84be9c5ec8a5b810b306490a90fce6fc6af309601fe2e65130adb2f87bb066c95d44c1a6410e7bfd19feb"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @private}, &(0x7f00000005c0)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='reno\x00', 0x5) 21:16:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x4020940d, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x20ee, "d1e68c61d6996e927248638b7086e246293e28b372644a8687e98bb1f663edc9", 0x2, 0x8, 0x4, 0x10000, 0x40000, 0x8}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x8922, 0x0) 21:16:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x1, 0xc, 0x4, 0x4, 0x0, {}, {0x5, 0x0, 0x3f}, 0x0, 0x3, @planes=0x0, 0xffffff00}) 21:16:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x80086301, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @loopback}, 0x5}], 0x1c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x6, 0x4, 0x8081, 0x4, 0x40000001, 0xe8bc, 0x8}) r1 = socket$inet(0x2, 0x80000, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000002c0)=0x10) 21:16:29 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0xf9, 0x2, 0x4, 0x5, 0x0, 0x1ff, 0x7f, 0x2a, 0x7f, 0x9, 0xae4, 0x7, 0x5, 0x1f, 0x8000, 0x7, 0x7, 0x6, 0x10000, 0x6, 0x9, 0x4, 0x80, 0x3, 0x3, 0x81, 0x4f, 0x3ff, 0x2, 0x1, 0x6, 0x2a]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 21:16:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x8922, 0x0) 21:16:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fff, 0xffff, [], &(0x7f0000000180)=0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0045878, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:29 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) r2 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x2, 0x8001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)={0x2, 0xc, 0x4, 0x100000, 0x6, {0x77359400}, {0x4, 0x8, 0x3b, 0xd6, 0x1f, 0x3, "d89de475"}, 0x200, 0x2, @fd=r3, 0x9}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x100000001, 0x8002) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x2, 0xb, 0x4, 0x0, 0x3, {0x0, 0xea60}, {0x1, 0xc, 0x7b, 0x3f, 0x7f, 0x8a, "b14abaa6"}, 0x7fffffff, 0x3, @userptr=0x8, 0x9a5f, 0x0, r4}) r6 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x410000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000180)={0x6, 0x102, 0x1, {0x400, 0x5, 0x9, 0x4b24}}) 21:16:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000040)={0x0, 0xc, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "cc019f61"}, 0xfffffffd, 0x0, @planes=0x0}) 21:16:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x20, 0x6, 0x4, 0xe000, 0x40, {r1, r2/1000+10000}, {0x4, 0xc, 0x7, 0x81, 0xf8, 0x4, "53b7d6f0"}, 0x4, 0x2, @fd, 0xfff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:29 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000240)={0xd39d8df5bd1ea9b2, 0x3, 0x1, {0x4, 0xff, 0x4, 0x5}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)={0x7ff, 0x3, 0x4, 0x8, 0x7, {r2, r3/1000+60000}, {0x1, 0x8, 0x8, 0x11, 0x7f, 0x85, "7ff6d30f"}, 0x1, 0x2, @userptr=0x7, 0x3}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x7, 0x8, 0x4, 0x6, 0x8001, {0x77359400}, {0x0, 0x2, 0x0, 0x7f, 0x0, 0x8, "e8e960e1"}, 0x0, 0x3, @planes=&(0x7f0000000040)={0x5, 0x3, @fd, 0x57}, 0x8, 0x0, r4}) 21:16:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0045878, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x6, "2a552da76b2563636fb5c92dfd88d5273013ec6106e7942a2ef3791acf587761", 0x1, 0x1, 0x2, 0x0, 0x3b9ddc41d161d571, 0x4}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc010d61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:29 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:29 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x3, 0x3, 0x9, 0x8, 0x1, 0xff, 0x78e, 0x0, 0x0, 0x100, 0x5, 0x4, 0x8, 0x3, 0x1, 0x8058, 0x6, 0xff, 0xfff, 0xfffffffd, 0x80000001, 0x87bc, 0x5, 0x340, 0xc7, 0x8001, 0x2, 0x0, 0x0, 0x3, 0x6, 0x1]}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x5, 0x101, 0x200, 0x8, 0xe2e, 0xd079, 0x5ece9e80, 0x67, 0xff, 0x6, 0x2a94, 0x2, 0x62, 0xfffffffb, 0x5, 0x9, 0x3, 0x100, 0xf0ed, 0xfffffff7, 0xfff, 0x9e, 0x40, 0xfffffe01, 0x25, 0xfffffff8, 0x1f, 0x9, 0x4, 0x7ff, 0x2]}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0xffffffff, 0x3d31, [], &(0x7f0000000040)=0x3}) 21:16:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0189436, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) socket$l2tp(0x2, 0x2, 0x73) 21:16:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:29 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @offset=0x3}) 21:16:29 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:30 executing program 2: syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) 21:16:30 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc020660b, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:30 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x1b, {0x1b, 0x21, "be2b3836d8ffc33a2c40b3c996ea64f406a2f8fd6bcc5e0d3c"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f0000000180)=ANY=[@ANYBLOB="000f4f000000050f4f0004141004700b4fc4d77c38473c35a5e5f51359b53a0a100302020002f2ff031c100a81842d00000f0f120c0f000000003fff0000c00000c000000010100a80e100000000ff00010000ff00"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x5, 0x2, "9375a180", "efa011f2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x3, 0x3f, 0x3, 0x20, 0x2, 0x2}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0xe, 0xa0, "1a2a6bd21c0caf3e17f27c89d40ee365eb3c56ee1c5a68b21671d34af2a56854e23850dda7e0afb8dc4ac56fc62294cfb13d86c3a60323f608e877dfb9a54be6fddc4037b4c7a16743e3ce7abc8499962b68f8c96f127dac2283439772888f528b5cea7fb741542f8c205c49cce62626f78f141c8ef89760d9617960a3410e4b1dfc30d5e07bf45eb5bfda087f44983d5ba4cdf8dda1d91d13f412e2f6effe0f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "c4cc"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "d4f5"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0xec}}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x8, 0x83, "", {{{0x9, 0x5, 0x1, 0x2, 0x3af, 0x8, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x8, 0x4, 0x4, 0x40, 0x4}, 0x25, &(0x7f0000000940)={0x5, 0xf, 0x25, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0xc, 0x200}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x2, 0x6, 0xff01, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0xc, 0xc5a1}]}, 0x8, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x813}}, {0xe1, &(0x7f00000009c0)=@string={0xe1, 0x3, "6631f8ab369658523816de262c33241d39423c27447813b7827955cd138fd776bd8e30f63f04c947fbd0d60009efacd225ed18914f455730cdda794afcfa8d50f0877f23a1f6d5b1f5fc9eac19e79aa20dc5e8ca9be3c581a34165fef40b1d70ab43e577bb61eec515cd56715aeb3dfe5c316f947e9f3358941d8d777bf9a2f3d010afcba8972694563c7f0c8019b928e0375fdf3fe966994890a39e17f6fbbf37e21fb3433402dabf633d8dd637abb1cd86000a057cdc0fccb98421945802d39bd1321fc3e6afd8ea5d30abf551a5d25a2a11863dc6483d6d27548881ab4a"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x424}}, {0x8a, &(0x7f0000000b40)=@string={0x8a, 0x3, "71e4d7e4e1f90c927db2b95efd3ee340483de740e4be0bb0b3ffec71d84fd0ea8da0e62e3fa634ff5285f09e626d70feee350f96ac090c6f307916a2ac549d0caaa901df5d92df7e4cc9fb687b4e04c4a724ab8f5df867a20bda61a8e1fed54e4f5a5f5f3a5294652bce122ad3f7bd2aa738077f41fa2f1d3f0dc96169bdd3092cbc69c693331d0d"}}, {0x2, &(0x7f0000000c00)=@string={0x2}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x42f}}, {0x9d, &(0x7f0000000c80)=@string={0x9d, 0x3, "cfc377ba9c529767d9ba33662ba3ef38d9ae8bc6a5af31729f64b1408b0115afcf4093438ae5d396015c700c748c63c64b29fb76ca2c4e22a94e5f01f4fba05de50f3fa4de1806bad6d274b9a84c5a1b11d69155ebff49fd1552c1a638f911a2984a592be8207cd2e577abca38fc5dbcb6df141b90db0fe2537aff971a13403f80b6cc1269ec27c0c6b5ca9558055742f195165baf00473b800d0b"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000ec0)={0x14, &(0x7f0000000dc0)={0x0, 0xf, 0xb4, {0xb4, 0x4, "618601382832caf49925fa13f96ca720de1b1a1adfed5693613bb6e5285d6f2d45f85147444b760e13f68084e5b2b2985130bb925ff32f641634e46f204cbe02bb50fc30cfe5401ff7edc9483185b0c163091d16c6b78289f5ac3b3887bb4fe75def3e96ca50c7aa23d1bb08cf8fe45b28419c51c1482ed36a97fc0e822a32e3cc6714a4da5e04efceca4b51634a352142e2d5203667fad2fc9ce3a14882b796128818d9deb13275eec7d2636ef80910e4cc"}}, &(0x7f0000000e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8aa}}}, &(0x7f00000010c0)={0x34, &(0x7f0000000f00)={0x0, 0x9, 0x10, "16197a858a9c39eb92ed8ac5e817dc1a"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000fc0)={0x20, 0x0, 0x6b, {0x69, "83ad65a27fb6350338423ae8b5d912cd794655491f0446963c0c050dba64135b798206cbe3338461e9972241dbcd2f96deebdd4da02d7099cdd33dea9577a283f4cc69412e38f5ab5134b624c5dffe84216b14f258cd50824083fd569cd51422197eb7f9c70e2b8075"}}, &(0x7f0000001040)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000001080)={0x20, 0x0, 0x1, 0x1f}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r2 = syz_open_dev$video4linux(&(0x7f00000007c0)='/dev/v4l-subdev#\x00', 0x6, 0x2000) r3 = syz_open_dev$swradio(&(0x7f0000000880)='/dev/swradio#\x00', 0x1, 0x2) syz_usb_control_io(r1, &(0x7f00000012c0)={0x2c, &(0x7f0000001800)=ANY=[@ANYBLOB="20218e0000008e226c6a64ec1c2590953f3515016c2d13eaa7226d3cc7c1c3d7f707bb29de683e4fb9e0d09b6f8e7ce5df46c062052d8aac58db50984e850c56a08c96d524adff1da51527f135696895fe8dee3e445c04786cf04dd3d1fd3661418c8626ee12ee6384158e6455f2373a856947d14b0a04307c70137d97b8b4f6f619f8660defdad246d9da5bc99826e8ffd727207b5635409ab983254e35fc6b3b898316128676bf896dceb5248680ada45457eb18b3366d619c30f12cf10aebf85af371cbffdc2013ef3a37af760f625795639fec36df47b603631ef1e0"], &(0x7f00000011c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}, &(0x7f0000001200)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1d, 0xc2, 0xf9, 0xc0c5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x4, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "69c2950c45a07cbd53445d40a1483f64"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x0, 0x31}, @ptm_cap={0x3}]}}, &(0x7f0000001240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x0, 0xff, 0x0, "631dc843", "427256c8"}}, &(0x7f0000001280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xaf, 0x10, 0x9, 0x3, 0x3, 0x2, 0x1ff}}}, &(0x7f0000001740)={0x84, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001440)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf00]}}, &(0x7f0000001480)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000014c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000001500)={0x40, 0xb, 0x2, "1253"}, &(0x7f0000001540)={0x40, 0xf, 0x2}, &(0x7f0000001580)={0x40, 0x13, 0x6, @local}, &(0x7f00000015c0)={0x40, 0x17, 0x6}, &(0x7f0000001600)={0x40, 0x19, 0x2, "22c8"}, &(0x7f0000001640)={0x40, 0x1a, 0x2, 0xfffa}, &(0x7f0000001680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000016c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001700)={0x40, 0x21, 0x1, 0x7}}) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000800)={0x0, 0xffff0001, 0x3004, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000840)={0x0, 0x8001, 0x1013}) 21:16:30 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:30 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xffffffff, 0x60000) 21:16:30 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:30 executing program 2: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r2, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) 21:16:30 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000002, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1933.783996][T18270] Sensor A: ================= START STATUS ================= [ 1933.800380][T18270] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:16:30 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:30 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, "cc018e61"}, 0x0, 0x0, @planes=0x0}) [ 1933.846851][T18270] v4l2-ctrls: Sensor A: Show Information: All 21:16:30 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x2, {0x4, 0x4, 0x400, 0x3}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:30 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) [ 1933.891957][T18270] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1933.927447][T18270] v4l2-ctrls: Sensor A: Horizontal Flip: false 21:16:30 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000003, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1933.952389][T18270] v4l2-ctrls: Sensor A: Brightness: 128 [ 1933.971075][T18270] v4l2-ctrls: Sensor A: Contrast: 128 21:16:30 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x66, "6fb2943a995000800c6802ce98de6961c56380244f1be48f3569e0910c9f021d", 0x1, 0x5, 0x1, 0x1700, 0x0, 0x4}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1933.983065][T18270] v4l2-ctrls: Sensor A: Hue: 0 [ 1934.032563][T18270] v4l2-ctrls: Sensor A: Saturation: 128 [ 1934.052248][T18270] Sensor A: ================== END STATUS ================== [ 1934.141847][ T3201] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1934.458552][ T3201] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1934.466645][ T3201] usb usb5-port1: attempt power cycle [ 1935.147820][ T3201] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1935.448422][ T3201] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1935.456104][ T3201] usb usb5-port1: unable to enumerate USB device 21:16:33 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000004, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x0, {r1, r2/1000+10000}, {0x1, 0x0, 0x0, 0x2, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @fd}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x10000) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000001040), &(0x7f0000001080)=0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x8000, 0x0) 21:16:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0x7f, 0x4, @name="65f5a24065ef97100ee23ab5cc55e369908e2d220bb3c5b755ff027c3eef20cd"}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0x5, 0x4, 0x40, 0x5, {0x77359400}, {0x3, 0xc, 0xfb, 0x7f, 0x81, 0x0, "5b76e949"}, 0xffffffff, 0x1, @fd, 0x36, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r2}) 21:16:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x80000000, 0x80000000, 0x101, 0x3, 0x7, 0x8, 0x1, 0xe}}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0xfffffffb, 0x2, 0x4, 0x2000, 0xfff, {r3, r4/1000+10000}, {0x0, 0x1, 0x7, 0xa2, 0x6, 0x2, "ba4a48fe"}, 0x9, 0x3, @offset=0x5, 0x1, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x6, 0x4, 0x0, 0x0, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r5}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000600)=""/164, 0xa4}], 0x9, &(0x7f0000000780)=""/200, 0xc8}, 0x40000001) 21:16:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x6364, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x890b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:33 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:33 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x200, 0xf7, 0x201a, 0x1, 0x5, 0x1}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1}) 21:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000005, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video37\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x2, 0x401, "955e6d", 0x1, 0x7}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) syz_io_uring_setup(0x3762, &(0x7f0000000000), &(0x7f0000fee000/0x10000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000240)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x28000, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, '\b\x00'}, 0x0, 0x0, @offset=0x7fff}) 21:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000006, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x2, 0x100, "934053fe7dfb187944679de98a9b0d7397cda6e3176556e25f5844aadabc2814", 0x81, 0x4, 0x2, 0x6a, 0x8}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x6, 0x3, 0x4, 0x4, 0x3f, 0x5, 0x2}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {r1, r2/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0100e7ff"}, 0x0, 0x0, @planes=&(0x7f0000000180)={0x3, 0x366, @userptr=0x8, 0x7612}}) 21:16:33 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3f, 0x0, @planes=0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8913, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x7, 0x0, 0x4, 0x443e, 0x2, {0x77359400}, {0x3, 0xc, 0x4, 0x80, 0x6, 0x1, "24ecbda4"}, 0x1, 0x3, @userptr=0x100000000, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x4, 0x2, 0x4, 0x2000, 0xfffffffb, {}, {0x1, 0x1, 0xff, 0x1, 0x7c, 0xbd, "28234be6"}, 0x7fffffff, 0x7, @planes=&(0x7f0000000040)={0x1, 0x4, @fd, 0x4}, 0x1, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000007, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x5, 0x0, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0xfc, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, {0x2f4, 0xffffffc0, 0x9, 0x1}}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x8, 0x100, 0x6, {0xa1, 0x80000000, 0xd16, 0x9}}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0xfffffffd, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8914, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:33 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000008, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f00000000c0)={0x3, 0x0, 0x1017, 0xfff, 0xb5, {0x7, 0x8e}}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x9, 0x2, 0x1e246c5539f9ae5e, 0x8, 0x1, 0x2, 0x0, 0x1}}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x5, 0xb, 0x4, 0x1, 0x7, {r4, r5/1000+10000}, {0x2, 0x2, 0x7f, 0x4, 0x8, 0x7d, "7f3f7e34"}, 0xb72c, 0x4, @userptr=0xda37, 0xffffff01, 0x0, r1}) r6 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000200)={0x4c0, 0x0, 0x1017, 0x400, 0x2, {0x8, 0x80000001}}) syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x9, 0x8000) 21:16:33 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) socket(0x4, 0x80000, 0xfff) 21:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000300, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8933, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:33 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x9, 0x8, 0x1, 0x1, 0xf0, 0x7f, 0x800, 0x0, 0x3, 0x7, 0x9, 0x5, 0x0, 0x8, 0x0, 0x3, {0x6, 0x1000}, 0x7}}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000780)={0x0, @l2={0x1f, 0xdf, @fixed={[], 0x12}, 0x20, 0x1}, @phonet={0x23, 0x81, 0x4, 0x8}, @ipx={0x4, 0xff7f, 0x0, "832b60375428", 0x52}, 0x200, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)='veth0_virt_wifi\x00', 0x80000000, 0x6, 0x7fff}) r4 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x1, 0x800) ioctl$VIDIOC_PREPARE_BUF(r4, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x9, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @offset=0x8}) 21:16:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000300)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @multicast2}, &(0x7f0000000640)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in=@remote, 0x4e20, 0x80, 0x4e22, 0x4, 0xa, 0x80, 0x60, 0x73, r4, 0xffffffffffffffff}, {0x3e000, 0xffffffffffffff9e, 0x8, 0x81, 0x7fff, 0x9, 0x9, 0x191}, {0x800, 0x83, 0x800, 0xfffffffff79b50fa}, 0x7fff, 0x6e6bb1, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3500, 0x0, 0x0, 0x40, 0x8000, 0x7fff, 0x4}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r4, 0x2f, 0x2, 0x2, 0x1, 0x2, @mcast2, @mcast2, 0x8000, 0x7810, 0x3f, 0x6}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) 21:16:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socketpair(0x6, 0x4, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8000, [0x3, 0xe58], 0x3}, 0x10) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000500, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:33 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000600, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x100010, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r1, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f00000000c0)={'bridge_slave_1\x00', @ifru_mtu}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x7, 0x2023, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0xbf7b, 0x0, 0x4, 0x0, 0x0, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x1, @userptr=0x1, 0x5}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000280)={0x0, 0xe724, 0x3, [], &(0x7f0000000240)=0x5a}) io_setup(0x7, &(0x7f00000003c0)) clock_getres(0x0, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) 21:16:34 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x400448dd, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000700, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x10000, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000180)=0x14) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000080)={0x6, 0x0, 0x3011, 0x3, 0x9, {0xbb3, 0x20}}) 21:16:34 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:34 executing program 3: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x20004041) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x81, 0x7, 0x4, 0x2, 0xbe9e, {r3, r4/1000+10000}, {0x1, 0x9, 0x4, 0x0, 0x1, 0x9, "6c932794"}, 0x3, 0x2, @fd, 0x3, 0x0, r0}) 21:16:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x400454ca, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x600ff00, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000340)={0x1, 'xfrm0\x00', 0x1}, 0x18) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x1, 0x0, "887a59d3d179dd0c3349202ec561c60a1a7acc4f0d919d760438ec60e370a2b4581f03765d7d8ae2810d55d43ac91fef6457a68567eacecece1a1cf5918ec8737d2ef31c537caf21ea8689ceec9d74b2"}, 0xd8) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x140, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='wg0\x00', 0x6, 0x2, 0x7ff}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x3f, 0x1, 0x4, 0x100000, 0x4, {0x0, 0x2710}, {0x2, 0xc, 0x30, 0x2, 0x2, 0x80, "52fa5efd"}, 0x2, 0x3, @planes=&(0x7f0000000280)={0x3, 0x5, @fd, 0x8}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x80, 0x0, 0x81, "cc019f61"}, 0x0, 0x2, @planes=0x0, 0xfffffffc, 0x0, r3}) 21:16:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0xfffffe01, 0x1, 0x0, 0x10, 0x6ed22870, 0xeb0, 0x8}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0xffffffff, 0xa, 0x4, 0x100000, 0x8, {r1, r2/1000+10000}, {0x2, 0x0, 0x1f, 0x4, 0x4, 0xff, "ac76eab9"}, 0x981b, 0x1, @offset=0x1, 0x9, 0x0, r3}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x20, 0x3, 0x0, 0x2, 0x7, 0x4, 0x0, 0x5, 0x85a, 0x1, 0xfff, 0xb7f5, 0x1ff, 0x80000001, 0x9, 0x10, {0x6, 0x3}, 0x7, 0x5}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r4}) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) 21:16:34 executing program 2: socket(0xf, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x8de, 0x0, [], {0x0, @bt={0x9, 0xf8, 0x1, 0x1, 0x1, 0x0, 0x3f, 0xa0d, 0xffff8000, 0x4, 0x10001, 0x2, 0x6, 0x1, 0x10, 0xa, {0x3, 0x401}, 0x40, 0x3f}}}) 21:16:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:34 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0xd000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:16:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:16:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:34 executing program 2: getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x92}, &(0x7f0000000080)=0x8) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r0, 0x4) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000780)=""/7, 0x7}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}, 0x12162) r3 = socket$inet(0x2, 0x5, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000200)={0xff}, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000002300)={0x0, 0x5, 0x81, 0x3, r0}, &(0x7f0000002340)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002380)={r0, 0xa, "834646ef6c59fd094d99"}, &(0x7f00000023c0)=0x12) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000004b80)=@assoc_value={r0, 0xa8}, &(0x7f0000004bc0)=0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x20}, 0x10) sendmmsg$inet_sctp(r2, &(0x7f0000004c80)=[{&(0x7f0000001840)=@in6={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, [], 0x1}, 0x3}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000001880)="35d88ecf6f4b9ad31fd66159db4b5e202c565e00605f1ad13d2399b46de78b4d09a47d6ad391cdeeaebde4a481890d9c76575b4c3cfca3ff109e4e354480491b8a1b47d0e80a207d220dcdf3fcbee4088c9946b7e5d51bb43490cd9bb3ba", 0x5e}, {&(0x7f0000001900)="028552f43d64a5debae4fc992a55b5e9b393f42225c2a21579df6d49a327fc9ceb570c6b33c76bf398ad7c962251f6eb32a66172a831df05cc33b01464e6bd7fdbd1df07364afdfb89103e312991fac0e426b511cd2cc725a997b8cfe115794797d48d30d5006f609fde7e05eee06103996ea002c7e6f96e12ca9c31f24ed38a65571490e22ae68313f0b7709b7f5603d0638484dfb9986fa526a4cea0ca26ae046e97b2a9759275d270ebd4a9966e528de47bdd77cac2cf7fbd13fb09cc1225bfac", 0xc2}, {&(0x7f0000001a00)="b27bf6af7fb33b26ad9c818ff007b6ba1fb3000a36b800e939a82e23e2da2aa9678fa208a9480d982ff44971e070f32b7c4462e1f2ecfe2d0f2442c693babbc3d4ba6372349869a4aba06b86701dd44e085947ead8682c29823b6e0d85a65807649994994d2e", 0x66}, {&(0x7f0000001a80)="8e6a4a27d1080ef61b43a2d65bc4a10301c5c7b714a3dbeb3da79f2017e3b8252a49e21a2fb5c93537721b68fb4c4d67679ab62fd24ea472de8f9eaac81ff154eabdeedd1e3364dda967785a43021fd3fe5195e9fef445a148de315225ed5e9c4b57dee8ee7b37523f01f36803c874a91bf850289bba649dab295f6fe1b36f3ebb0e0711430fc04bb19a663c133251d5fcf7bf9cf7b9ac6eb87137e769d3b0c515f3ca141bc14a2da7501069d925fff30cea86d5832b113e09f216ae2e45dbfa53ec4aef38616e7f3db4cadd3f3a91f765ccd8414fbb8dfe9c1ac33ace385c4d3c7ba0c7f319d5", 0xe7}, {&(0x7f0000001b80)="fd27a280f5f2b545e8f144afa23cb6162b8f59f23ac5f893ca5ac2a3fb067437e3ce92af10b871a9b21a10db298b19281095d319a9aa909b0c7e9de9be8f1fcd743ad3d2c9a9e72cce340f6d1a6f14f256170125a202511b2dab52f7114787576e0bf46b46edf1d514fb4852facfd14115f5f1655315bf30f8f75ba62624a61412e26689d41b1b2629bdf025c6344dc81232992c596f69ff1f063968e62cc254c1173fc2c9e98552e39442181030ab5178e5420213b3d89565609fbea0a5dcca3bd3185c2284507b4bdea5fdec31b0ba41c7da74a456f7dd4e0b5963e4", 0xdd}, {&(0x7f0000001c80)="19bb7ccf1001a9585be2a1e1d600f41024b5b1e9d1ff4af2b1531ec7864fce1bd8d636d8056f73fc2741865acc508bc15db062c92d92734436efa8fece563cc04ce38f422ce2f41c76a4846c0b8ba97de12cdc2bdf0502e389220d3b586dedfa1bfd930029ceec562ec63960be79f392020ca4787d6a146e9dec095d7573b6fecabf442ba8de715fa1d303595caadb20a59dd29152d4583bfce60456481612731871ba936955db87e70c9a379263cb", 0xaf}, {&(0x7f0000001d40)="c51eaefe65fe415872b95afda669310e7fe794c1091f2ff154dddbc4bc60ff89363017b3a7743001c7", 0x29}], 0x7, &(0x7f0000001e00)=[@dstaddrv6={0x20, 0x84, 0x8, @private2}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, [], 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x4, 0x1, 0x8, r0}}, @init={0x18, 0x84, 0x0, {0x1f, 0x1, 0x8a0}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8000, 0x1f, 0x80, r0}}], 0xb0, 0x24000010}, {&(0x7f0000001ec0)=@in6={0xa, 0x4e21, 0x3, @local, 0x4}, 0x1c, &(0x7f00000020c0)=[{&(0x7f0000001f00)}, {&(0x7f0000001f40)="02b35b3233cf08b2a089daf5e6d6f07833e9c2085ceb7494ee9e2df57365e8402bd3cc92c46ea128ea1a7f674c7ea0095b81710ad40284c2d73b046ce8588fbb82daad179e0e73175e2b3fdb2a28a836de995bfe720ab51ff72d74", 0x5b}, {&(0x7f0000001fc0)="5a83e329b1d6cacdb8c4ba90096c6d69911a5916929c33263c4e65ebaffceea155", 0x21}, {&(0x7f0000002000)="b177d2cbc2986d8b96a1b431cf2fa76b3646b1b676a4e7aad45b01ef5d6c6cce25c2109dfe79e5b2c6427fb9bdf95f8d6002ebb6226c2978e74e41df79b06f37583d90173bb5a8dfe9229831096c18c879d694a6e29005e0e7812e", 0x5b}, {&(0x7f0000002080)="85a80e018849b0f42d69f8a6b98b3e90", 0x10}], 0x5, 0x0, 0x0, 0x8000}, {&(0x7f0000002140)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000002180)="01060eb80e844a05c8cf58912cc111b98b5780408c11d9665521fab9c477949a35004b42ca12666e3aaeb8079f8ba5a9e75e0492926937d30a48da262a15fc1d7f49b5e8830a5178369f255eaee929caaba8512aad23b528862e2052c2102818782469cfe351e5fb669f71247868515100a5c58a1bf9c84e63fd7c9743c4388563673d0bb4d91f1617941500fba896f79462b3cf4c980b7ebaf0d854ae36e47ef8549e9b70e02da27516218f08f35569c68e891fda5903988d3c2ee1ecade50ce8bcb65826f4d5d3539bb55fcb4d3788aa5bd0a3710279e906bb3157351edc5dafeb2f363b1a40f86a988e", 0xeb}, {&(0x7f0000002280)="c6adc8a7f200481dd057b566bccdca", 0xf}], 0x2, &(0x7f0000002400)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200, 0x8, 0x81, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40}}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x204, 0xffffff06, 0x3, r5}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x200}}, @sndrcv={0x30, 0x84, 0x1, {0x40, 0x5, 0x200, 0x10000, 0x10000, 0x400, 0x5, 0xf45a, r0}}], 0xa0}, {&(0x7f00000024c0)=@in6={0xa, 0x4e22, 0x7fffffff, @private1, 0x5}, 0x1c, &(0x7f00000029c0)=[{&(0x7f0000002500)="0a961b3056d6055d8f8c1f63ab418ca5c68b9c8a14afc6492ecd2ae8e63ce57877a913f15efa2dab4c7ad87da29666193822db3da1f5b3f9c07d57316797489bddacebfe6db7235a23fc610fdf61c0c66d0da49680ec1a78204f3d273fb9fed669493f0bb8078564171e32dc4df48437ff514776cb3c23ce9acb9aa84f539ed6ecdd095fad13b92681a965a113d84fdd196246fffa9bae6ad096b3141ef6bb22484157518fc9928312056a1984bf0ec3836099f717cc31c6d8d7dcf34ebdd56e03c450486248439082d8c522149ce72f1df58bbfee6e1d73b3", 0xd9}, {&(0x7f0000002600)="c8e6156313f0952a6aa63fd90aac0d44738742d77a273afb0b3edb57b9a73ab465fe1215f44592719a918911d473f9c8e872ef44ba3839914778660d50e5f5e6f1346166feca232ac64391b2f613d912a59c940c6d4c7c678d1359f8f9840282d87339d71cb20ce1f8d24ce9179ddb071d96cd83b51ea45697fc22ee69e9aa2ab6d26109e43d645afd3cb9e4b752130de43f4958a87c2e89c92cfbc2ab7d85129a884384790be9d010fc83ca912550a0ea0a49c99303bfb0fd5f28b4ff47", 0xbe}, {&(0x7f00000026c0)="704cb5c824a4a3d08efc04b729334850f6ed0b792b3a972d3ebbabcbee4d50e5ad3a1605305d7d89b9a5eba7f5cfaf519798da110d", 0x35}, {&(0x7f0000002700)="c452595befeb512f27a4e308e1406e66b9b20e7ee05223e758c51fe759378496c3a44827a3e7166ab3ff52f83c9fe0cd222d8a6a004ca56027de213db678ba62690439be7d622de0", 0x48}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="368a42c3a7ec0e081671394e89adc5374ed25d88053ad71f2349c83e9d2f51c3a543e9246a3b18884dc5a1cf74ebd45cc6165b70db64e631af5af070d71ad04efa2c9c59b27a894d556b4377289480c77809c386e7b1e13af949c9b8c102bc6d8c84f7d8483d83fb27a900a17ba754488ac5c4f54448e956b73732a527767f022d6821b94cb160", 0x87}, {&(0x7f0000002880)="f537b9c36cbb248feb071c54f45172024ecd5755b937f29eb3a2d2c9fdcb9b456ae43a674da628baac8740b7429e1f02f06d84", 0x33}, {&(0x7f00000028c0)="ff7b01ead402c190ff2a7e05be464fe13b0a152383a431f57119a37a0d613eabc74d2947b74e92bc6cd6787682b39233b6adfee9066146f39a633695e1e58dffdb02a6fa8612839f76c9c8635bf65fd275a4a7b5763a1dcdd0fd869d617a42efa1f5113692b1471c92aa8c9f", 0x6c}, {&(0x7f0000002940)="4ccee31f40dd1175cdee4cd7b7c3b97d46f758a06d444e5eaf19224a342a0f5362967393aaaa97706f3f8acca975f2b8ab8ebc9b757dfb8bf4e096ded6250e7f23fa9fdeefd1cc3f06d49ae3d8be2db436415d12ae0ce224f0734e04b65b451ad59a298a1023365b8b", 0x69}], 0x9, 0x0, 0x0, 0x40001}, {&(0x7f0000002a80)=@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x4}, 0x1c, &(0x7f0000004b40)=[{&(0x7f0000002ac0)="07e289294cba018877cb6a5ea4b6ea1cda93c6707734cee3ebf2b2c9061adaacd77a466807aef4399bd5d80609d412a59ce3a219108e7bb31010bd7052ea90fc31f64532fb10a6ee36f5479f55ff5576fed5cf9e6eac6c3d37ce382f57b533578d40b529c2a6", 0x66}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="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", 0x1000}], 0x3, &(0x7f0000004c00)=[@sndrcv={0x30, 0x84, 0x1, {0xffff, 0x3ff, 0xb, 0xffff, 0xdcfe, 0xff, 0x4, 0x3, r6}}, @authinfo={0x18, 0x84, 0x6, {0x400}}, @init={0x18, 0x84, 0x0, {0x3, 0x0, 0x1, 0x20}}, @authinfo={0x18, 0x84, 0x6, {0x20}}], 0x78, 0xc8c4}], 0x5, 0x40000) 21:16:34 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x3002, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0xfc, 0x0, 0x0, 0x0, "d9029f61"}, 0x0, 0x0, @planes=0x0, 0x7}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x3, 0x53439089, 0x2, 0x9, 0xffffffff00000000, 0x401, 0xa}}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x8, "ebabcf0dd3ee2b41332423d2e7f5fd2191ea0c4866e0a378086c7c0662a06d4f", 0x2, 0x5, 0x0, 0x80008, 0x0, 0x2}) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000180)) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000005", @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf250100000008000100010000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1311102a9f10d3c4}, 0x8014) 21:16:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, 0x0) 21:16:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40186366, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x10000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x40000, 0x0, 0x4, 0x0, 0x75, {}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, "0600"}, 0x21, 0x0, @planes=0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @multicast2}, &(0x7f0000000080)=0xc) 21:16:34 executing program 3: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, 0x0) 21:16:34 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x8, 0x2021}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0xea) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f63"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0xff000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000180)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ab019f61"}, 0x2, 0x0, @offset=0x40}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0xc, 0x3, 0x0, {0xfffffffb, 0xffff, 0x66, 0x81}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x7fff, 0x3, @value=0x8}) 21:16:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, 0x0) 21:16:34 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x4a8f, 0xb, 0x4, 0x10400, 0x8, {0x0, 0xea60}, {0x4, 0x0, 0xaf, 0x6, 0x1, 0x2, "f98b75d7"}, 0x20, 0x4, @fd, 0x4}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x400, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "cc019f61"}, 0x0, 0x0, @planes=&(0x7f0000000180)={0x182, 0x41, @fd=r1, 0x1}}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x2, 0xe1, [], &(0x7f0000000040)=0x9}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0)={0x5}, 0x1) 21:16:35 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000040)={0x40, 0x0, 0x1001, 0xffffffff, 0x2, {0xdf, 0x10000}, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0xf9, 0x1, 0x4, 0x70000, 0x8, {}, {0x2, 0x0, 0x80, 0x3, 0x6a, 0x20, "29d1bcc0"}, 0x200, 0x4, @fd=0xffffffffffffffff, 0x6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0xffffffe8, 0x0, 0x4, 0x1000, 0x0, {0x77359400}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xff, "cd019f7a"}, 0x0, 0x0, @fd=r1, 0x3ff}) 21:16:35 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "4c019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x80001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000180)=""/218, 0xda}}, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=""/118, 0x76}}, 0x10) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 3: setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0xfff, 0x4) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0xc8f5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), 0x0) syz_io_uring_setup(0x56c9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x4, 0x1, 0x9006, 0x10, 0x0, 0x0, 0x2}) 21:16:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x9, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "ec019f63"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x6, {0x7, 0x6, 0x3, 0x5}}) 21:16:35 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x2, 0x2017, 0x1}) r1 = socket$inet(0x2, 0x80000, 0x401) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x7, 0x200, 0x2761, 0x47b, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r2, 0xf0bc, 0x3ff, 0xffffff16, 0xff, 0x1}, &(0x7f00000004c0)=0x14) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0xde, 0x2, 0x0, 0x2, 0x400, 0x1, 0x6}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=""/104, 0x68}}, 0x10) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x40400, 0x0) syz_open_dev$video4linux(&(0x7f0000000600)='/dev/v4l-subdev#\x00', 0x9, 0x4800) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x400200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000003c0)={0x0, 0x0, 0x103, 0x2, {0x9, 0x1, 0xfffffffc, 0x9}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) socketpair(0x28, 0x802, 0x7, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="5c0000686db00052c26b5ab3e69157a4bfb89ae505bb00150cc0f9f4701afc20b72aef40a8d231776db0e01c3e93c1d47180c078e873085391713a23fd582f8553fea051f3f22668187054578a7261d71336a353a41c30a36aa224d913b6812162242354f7d09fd55d26c24d1d7aac3d32fd67eda83bf9b48aeb48cd586c00000000ab483fdbec8cca1408dfcb8fc5ba513edcd20d3dd5981f17849c1396d89caee0fad585670db9bfa5aef5c78bf23ac54aa06560f9428b4f9455901b64ea5ae90bb4b4493d06acebc7693f554539e081941bfa6b85f2d15b59cca1390378ed2154c43d68a95785b06676298d0b0e869c762fe51fa110cb9986de02df7abe1584789fa9c4090a993eb115bddd28536364d1eb16a5dfb579c8cbd514258bf9c6fe88acef0d030fd0be079fe0ff07ab9de02902c0bf9a013f2d9bcfb3ee10bca6ba010000000d000000367bc4690500000000000000"], &(0x7f0000000680)=0x64) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000300)={0x20, 0x1, 0x4, 0x2, 0x8, {0x0, 0xea60}, {0x3, 0x8, 0x3, 0x80, 0x9, 0x7, "bd9e21e1"}, 0x4, 0x4, @offset=0xfffffff8, 0x1ff, 0x0, r5}) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000280)={0x800, 0xffffffff, @name="761c1fb63f984db690a583cfb04a72ab0383cba222eefee74f9131e52cdac53d"}) 21:16:35 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x28728000, 0x4, 0x0, 0x5, 0x2, 0x7, 0xfff, 0x1, 0x80, 0x4, 0x1, 0x800, 0x0, 0x1f, 0x4, 0x20, {0x7f, 0x3f}, 0x9, 0x3}}) 21:16:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80086301, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x2, 0x4, {}, {0x2, 0xc, 0x7f, 0x0, 0x8, 0x0, "04000008"}, 0x1ffffd, 0x1, @planes=0x0, 0x7}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000180)={0x100, "2043e561da58cc4fa3996cb61eebe2e6ac8f7fdaa74d02261acb67441fa16c97", 0x2, 0xe8000000, 0x2, 0x1700, 0x10000, 0x2}) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000080)={0x5, 0x0, 0xbda9e5aee1a101d5, 0xe5, 0x64, {0x4}, 0x1}) 21:16:35 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x5c, 0x3, 0x8, 0x8, @loopback, @private1={0xfc, 0x1, [], 0x1}, 0x8008, 0x40, 0x9, 0x9}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0x6, 0x0, 0x1017, 0x3, 0x3ff, {0x6, 0xfb8}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r1, 0x29, 0x80, 0x1, 0xe924, 0x8, @private0={0xfc, 0x0, [], 0x1}, @loopback, 0x8000, 0x1, 0x9, 0x400}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @initdev}, &(0x7f00000007c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl0\x00', r2, 0x29, 0x0, 0x7f, 0x3, 0x5, @local, @loopback, 0x40, 0x8, 0x0, 0x5}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x400, 0xacb, {}, {0x4, 0x0, 0x88, 0x1, 0x0, 0xfd, "9f6100"}, 0x2, 0x1}) 21:16:35 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x80) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x2, 0x1, {r1, r2/1000+60000}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xf9, "cc019f61"}, 0x101, 0x2, @offset=0x8, 0x1001ff}) 21:16:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000180)={0x2, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x2, 0x100, "a6f52031187a084acec787a59d61c9b76c6659f0334fda7e45f37483f93719a8", 0xffff4097, 0x1, 0x9, 0x40, 0x20}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)={0x35, 0x4, 0x4, 0x1, 0x400, {0x77359400}, {0x2, 0xc, 0x6, 0x0, 0x7e, 0xd7, "e3ad8ddd"}, 0x0, 0x2, @offset=0x10000, 0x5, 0x0, r2}) 21:16:35 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x538, &(0x7f0000000180)={[{0x26, 0x4e00, "ab329683b4a40e1bc9f89f94e9e0daf481696988d199374eb7b96c7447c3854e9db934bf4591"}, {0xa, 0x4e00, "374917348ea9462688e7"}, {0xfb, 0x4e00, "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"}, {0x99, 0x4e00, "d81e4d2f15fdf4406f694efe1ab697db76983bfbfbd19bf68941a1862682395fc839163b0a38541c6e866c03e2e17f2d5fbe2b136b9b133ae1720584ad6bd750e32967013814ac6693e53374351f00cdcce86c52a3c25141805e312f40950bf0ecfe49da96c4d741b8615622803165760bb4fd252f4cf1eeca49457cf0784db038e8949c359c9b63298c93789c4007b725446cb12f8bb01389"}, {0xcc, 0x4e00, "8502e45d56a1f09d700363c23d9561f9d2a4e1998f68c49129638a9a5c5b715b5a1d0ce60bc9bf8b369d3b772d44e3f12cf58d1dbe022d8f6046edf9cd23f9c0a69cb749526fc3201a45881fb9d2ce58d260f774a33c0d317089f616f37a9388a75e36779b5c1b98961d684636a5f49f62e81a63d44eee6e25e2b171b45a31c17c240de85bdcc71b75207d434e18b057e9494c2e6bf64cedba4a26014dbc036f4cddd762e897e78fc54bb952cca655bac809fb089184a36ff9d3424cf67dc873ddba5ca8e7e3c7b9487288d2"}, {0x44, 0x4e00, "0daba3a5cc7172a45abd677a19b8dbc361606b09624575b62ca01e463ff9684818f9a3e251d3f25b5dd01895e657947d3e8efb0ab0455d0158dceb281c78f7a2316b2e26"}, {0xe8, 0x4e00, "f08cc4c27e5461b0e24b27a8f059d6cabe2a80b1d379e9aa22e9dd74581ade125a0427c52d7d2d2961cb8d1c6f75a80782262b3cc4f28fa4878e0490c32084b06de613594547f41955ae75a5789f4701f07054d5db14514784c65ef1e8c8c6f14df30368486bbf7b59db2531748f6ed1cbccd4208f6fa714366988f9fbc11f0cc375bb936a41d0d505ed5ea47856268c22efd6c95d3d6c68d987e256cb93f310dfaae7cbfe2a490d32fae58a2e53b695e1afd2d384f7c883bc60ccc68e9352381f7f1fc2b5190e7f5c1ae693d126df2b39acba96c89fcf3627612f64434d8990a534e2400bb95979"}, {0xdb, 0x4e00, "4e9ca60fbaa1b71cc35e082c424deb79b0b3c41b0b7d11466dab80ad795df956d361acc3322cd5eed59f59432ca36843a2492921bf4dd67327a5e1206ad8756c2f5964d0688f4b4398c3fac9199053ee5e06b9af7c5f2cc692dc6b50a2a22d405a8992a87ddb515e84845da80a31aeb7a8474a5a39d66ab4017d3966afaea2f621b80ff4aed1ba0d7e390684e2edc03ccd512601ac2cd3f85b35667c69743830292e96b30b717c8796d5d9f3608aa7d346300570cbcac930214753545360e26c0f8ab4010b8e6cfa427de966707fb3269a487349b78ae3cf1df7b5"}, {0x69, 0x4e00, "7cdded2248eb9b7cae15e79a94e3325d5d970c72d0dd1e544a21869975e1efa11cf22ad17c411bb071278dc4a78bc40c251f309516a6a2184b265a8bbd314a7939cab3ed8e6d21c4f360d900b51e088052a2070277077935a5d030ac3c1972fc0766c9a40d538b6735"}, {0x2, 0x4e00, "1346"}]}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x1, 0x6, 0x1, 0x2, 0x8, 0x3, 0x0, 0xfffffffc, 0x8001, 0x40, 0x0, 0x5, 0x8, 0x7, 0x12, 0xf63be3909b4c8d52, {0xaf5, 0x2}, 0x8, 0x7f}}) 21:16:35 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x6, 0x3, 0x3, 0x6, 0x6, 0x7fffffff, 0x924e, 0x7, 0x1, 0x10000, 0xfffffffa, 0x0, 0x800, 0xf687, 0xa6, 0x20, 0x6, 0x9, 0x5, 0x9, 0x10001, 0xffffffff, 0x7f, 0x1, 0x4, 0x10001, 0x0, 0x6, 0xffff, 0x6, 0x8001, 0x6]}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:35 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:36 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:36 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x1, @planes=0x0}) 21:16:36 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8, 0x80ac1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x35, 0x0, 0x201c, 0x3f, 0xd37, {0x1, 0x9}, 0x1}) 21:16:36 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:36 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x2bc, [0x20000180, 0x0, 0x0, 0x200003dc, 0x2000040c], 0x0, &(0x7f0000000040), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x9, 0x80f3, 'rose0\x00', 'caif0\x00', 'gretap0\x00', 'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xb6, 0xe6, 0x11e, [@ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff0000ff, 0x1, 0x33, 0x8, 0x8, 0x4e22, 0x4e24, 0x4e20, 0x4e22}}}], [@common=@STANDARD={'\x00', 0x8}], @snat={'snat\x00', 0x10, {{@link_local, 0x3}}}}, {0x5, 0x40, 0xa01, 'bridge_slave_1\x00', 'macvlan0\x00', 'veth1_to_team\x00', 'wlan1\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @dev={[], 0x2a}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'ip6gretap0\x00', {}, 'syzkaller0\x00', {0xff}, 0x4, 0x10}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x334) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000480)={0x0, 0x0, {0x9, 0x1, 0x2019, 0x3, 0x3, 0x1, 0x1, 0x4}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:36 executing program 3: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x55, 0x0, 0x4, 0x10000, 0x6, {r0, r1/1000+60000}, {0x2, 0xc, 0x0, 0x8, 0x7f, 0x0, "1b8356b8"}, 0x8d07, 0x3, @fd, 0x1, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x20, 0xb, 0x4, 0x4776cc87beb51762, 0x3, {}, {0x2, 0x1, 0x6, 0x0, 0xfa, 0x34, "6a79d3ee"}, 0x1, 0x4, @userptr=0x8, 0x7, 0x0, r2}) 21:16:36 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x300, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:36 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0x81, 0x0, [], {0x0, @bt={0xffffff00, 0x1, 0x1, 0x1, 0x6, 0x536, 0x8, 0x7, 0x1, 0x6, 0x65d2, 0x208, 0x7, 0x9, 0x10, 0x22, {0x1, 0x1ff}, 0x81, 0x2}}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x6, 0x2, 0x3007, 0x6, 0xb, 0x2, 0x2}}) 21:16:36 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, 0x0) 21:16:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:36 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x500, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:36 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x103, 0x0, {0x4, 0x4, 0x3, 0x3}}) 21:16:36 executing program 3: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, 0x0) 21:16:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565a, 0x0) 21:16:36 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x600, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)={0x400, 0x2, 0x4, 0x800, 0x4, {r3, r4/1000+10000}, {0x1, 0xc, 0x4, 0xff, 0x4, 0x1, "57f31e54"}, 0x6, 0x3, @userptr=0x2, 0x6}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x6, 0x5, 0x4, 0x10, 0x7, {}, {0x5, 0x0, 0x1f, 0x81, 0x7, 0x3f, '7U\f\b'}, 0xc9a3, 0x2, @offset=0x5, 0x40}) 21:16:36 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x10000, 0x0, {0x77359400}, {0x0, 0xc, 0x0, 0xfd, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x2acb21627287f01c, 0x102, 0x4, {0x4cd, 0xfffffffe, 0x2, 0x401}}) 21:16:36 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0x2, &(0x7f0000000100)={0x80000001, 0x0, 0x4, 0x4, 0x0, {r0, r1/1000+10000}, {0x1, 0x1, 0x0, 0x0, 0x4, 0x0, "830afe27"}, 0xfffffffd, 0x0, @planes=0x0, 0x1, 0x0, r3}) 21:16:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80885659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x700, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x70aa, 0x0, 0x4, 0x0, 0x99c, {0x77359400}, {0x0, 0x0, 0x5, 0x4, 0x1, 0x2, "58c26324"}, 0x10000, 0x2, @userptr=0x800, 0x1, 0x0, r1}) 21:16:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000180)={0x40, 0x1, 0x9, 0x1, 0x80, 0x3, 0x6}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x400000) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0xffff4d0b, 0x0, [], &(0x7f0000000080)=0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0xff00, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x1000, 0x4, 0x4, 0x2000, 0x2, {0x77359400}, {0x4, 0x0, 0x6, 0x1, 0x27, 0x9, "1991a7df"}, 0x0, 0x2, @offset=0xfffffffa, 0xf94, 0x0, r2}) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8, 0x3, 0x33, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000240)={r4}) 21:16:37 executing program 2: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @broadcast}, {0x6}, 0xf, {0x2, 0x4e24, @broadcast}}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:37 executing program 3: munlockall() r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x922f, 0x7, 0x0, 0x0, 0x2, 0x1, 0x0, 0x427b, 0x8, 0x800, 0x3d90, 0x8, 0x4, 0x1, 0xc, 0x2, {0x200, 0x1}, 0x81}}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xfffffffc, {}, {0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0xc624, 0x0, 0x1, 0x9, 0x200, {0x1, 0xfb}}) 21:16:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x1000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xffffffff, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x3, @planes=0x0}) 21:16:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x2000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x7, 0x107, "87df1158165a837c5582e8ba1c5a845b1c4adbbd4008162721f502e280d19b77", 0x10000, 0x1f, 0xfa, 0x1, 0x80}) 21:16:38 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x3000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xff, 0x301400) socketpair(0x26, 0x80000, 0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000300)={0x8, 0xc, 0x4, 0x10000, 0x0, {0x77359400}, {0x4, 0xc, 0x2, 0xfa, 0x1, 0x81, "b5af7649"}, 0xfffff074, 0x2, @userptr=0x7fff, 0x9, 0x0, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r5, 0x0, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x8, 0x40482) io_submit(0x0, 0x4, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f0000000080)="9e0039e686f0b8e39b53bfac20f82b0b43b4e13a5ca07f309a3681f0b0caeebc814fcd6a660ee37961ae5982d74e473b304c0c0ecadc9be6b4ef599df5c65dc5bb503253c8fb2e41634a", 0x4a, 0x5, 0x0, 0x3, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x1, r3, &(0x7f0000000200)="7f0fc9d70e256828f50b6a210c00b6b2bcfea5883a9f0d1688b4894733a2b2d7ced6ce0f6a70381d72be7ca1aba26209a0781fa1f6fcb0cf666b9345667dbd929c2e6ec1f74fc966e8a10d0d95e66b13c2754acb185f9c9720e2f8398b0a3b1293ab165aa2bb4480aaf35e792445437dc96b7ce5fd39248eeb4ba3534b7a0b8044de9e700d7eca494fbef018e1f7e76310f8209c4d64a5ce887e3fa62f4d54dba80a2e7813dc84678087a198acc13ec071233bbf3ce20fed17", 0xb9, 0x401, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x4, r4, &(0x7f0000000380)="471864e8785d48c23aef813705609320308733acf2ab41bd6aea774743ed724c0f833cd599e74feb87bf76b3eb4d3fd5abc47e5e690d9004df098f60fca2c4eeb709c1af18eeef325981dd449e83690549c575247015846a45a759cf7a751ce05b646a01541fab8164e415efee453a3187c59a89b43b1bdb89765892145d7bc64eedff34ac4ae1f8da8ece4746516eea83700ac040ae1d2cac42cac67df65f87c58da9f1fe3d83cd1f88512416fd4a1b240e82b0", 0xb4, 0x6, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, r5, &(0x7f0000000480)="369da66a2a367ef04425b45279385f9467a5b3a228dbfc8d1854f94df13ad1166488f9e8f88e635cf7a7c09f6f8774c5881b2abe21b77d66b001ac80bb0f55e083b877d0ef06e6419600cab116b07d67db25390a480091df7034e838", 0x5c, 0x100000000, 0x0, 0x3, r6}]) 21:16:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x4000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0xf1f, @ipv4={[], [], @multicast1}, 0x2}], 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x401, 0x24000) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000240)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x101, 0x101900) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0x2, 0x3, 0x4, 0x1000, 0x2, {0x0, 0xea60}, {0x2, 0x2, 0x7f, 0x7, 0x6, 0x80, "efd683a8"}, 0x6, 0x2, @fd=r4, 0x61, 0x0, r5}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 21:16:38 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @offset=0x80000000}) 21:16:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 3: getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000800)=@sack_info={0x0, 0x8e, 0x80000000}, &(0x7f0000000840)=0xc) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000180)={0x0, 0x0, {0x7ff, 0x7, 0x201a, 0x4, 0x7, 0x4, 0x0, 0x6}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept(r1, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f00000007c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/181, 0xb5}], 0x3, &(0x7f00000006c0)=""/214, 0xd6}, 0x2000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000002c0)={0x10000, 0x3, 0x4, 0x70000, 0x4, {0x0, 0xea60}, {0x4, 0xc, 0x5, 0x8, 0x4, 0x0, "9817601e"}, 0x3, 0x3, @offset=0x6, 0x3}) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x9}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @rand_addr=0x64010101}, {0x306, @broadcast}, 0x64, {0x2, 0x4e22, @multicast2}, 'vlan0\x00'}) 21:16:38 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x5000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3, 0x1, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)={0x6, 0x7, 0x4, 0x10000, 0x1, {r4, r5/1000+10000}, {0x2, 0x1, 0x81, 0x2, 0x4, 0x2, "360f122f"}, 0x4, 0x2, @fd=r6, 0x4526, 0x0, r1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r7 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x140) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000180)={0x3, 0x0, {0x3, 0x40004000, 0x3003, 0x1, 0x7, 0x4, 0x2, 0x1}}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x677, 0xa, 0x4, 0x1000, 0x6120230b, {}, {0x1, 0xa, 0x50, 0xe5, 0xf3, 0xb1, "678474cd"}, 0x51a, 0x1, @userptr=0xffffffffffff526e, 0x960, 0x0, r7}) 21:16:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x8}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x0, "716b2f56f5a0fb452ce4fc468f2609b091798cb4a474dfd840fadc66a1f4fefb", 0x1, 0xec, 0x2, 0x200000, 0x22, 0x2}) 21:16:38 executing program 2: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x6000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x80, 0x0, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 3: ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x4, {0x5, 0x401, 0x0, 0x6}}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x2, 0x2, 0x1000, 0x2, 0x0, 0x8}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @userptr=0x6}) 21:16:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x2e, @multicast1, 0x4e22, 0x3, 'lblc\x00', 0x0, 0x1ff, 0x4000160}, {@empty, 0x4e21, 0x2, 0x8000, 0x3, 0x7f}}, 0x44) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x7000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) 21:16:38 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x8000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x4, 0x3, 0x4, 0x2000, 0x2, {0x77359400}, {0x4, 0x2, 0x6, 0x6, 0x60, 0x0, "56920923"}, 0xffffffff, 0x3, @userptr, 0x7, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1942.305403][T18752] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20002 21:16:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)="6e9118e1146966f963d296219370b50dcd649b1c9849131b7cd6156ce36d615f30b15a668c3c6cbb9515f2c41b69baa3a1fbd84fdaf856d567575b10da0049efa9a0c9ecb0fdd65934b6103e0299102dd3b2ea20d58916b9066589f4ad6f7ed709635a138e12b4df50ebf94456803804913e0e63b166bc3d695cf7d63f9b2ea3c22be050c03b81980484c986720e73e53e4b29ffb52206901b54db0cf772b6f835d010be975d8566ae8b585770ade36a21e57a28c69e738897f6", 0xba) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000080)={0x9, 0x0, 0x4, 0x100000, 0x4, {r3, r4/1000+60000}, {0x5, 0x8, 0x3, 0xff, 0x9c, 0x20, "df5b1d59"}, 0xffff, 0x4, @userptr=0xed, 0x7ff, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2000, 0x9, {0x77359400}, {0x2, 0x2, 0x7, 0x20, 0x0, 0x7, "dddabaf6"}, 0x3, 0x3, @fd, 0x2, 0x0, r5}) [ 1942.373697][T18752] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20002 21:16:38 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0x6, 0x0, [], {0x0, @reserved}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x401, 0x7f, 0x2017, 0x2, 0x1, 0x3, 0x1, 0x1}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)={0x3f, 0x1, 0x4, 0x40, 0x7, {0x0, 0xea60}, {0x4, 0x8, 0x6, 0xd6, 0xfb, 0x5, "da687cf7"}, 0x6, 0x2, @userptr=0x5, 0xffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x8b, "9fddcd81aea18ae04d575a77d3d0ba1ec72155da1a9a23ef62690f2b3db62b7575042134026df390da53fd7905cafa61ba8de8f3689036d436fc85745aaa403cc693debda38a8c5ae24e9cc023a88aeb2c9310fc6a954db372e6bb2fe41e8f28fb3bde1a845ec2114178ea1dfb81a46f9195f20f6aceadee498cf7b0fa444137d14cacaae44824936cf200"}, &(0x7f0000000300)=0x93) 21:16:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) syz_usb_connect_ath9k(0x3, 0xffffffffffffffd6, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54}}]}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x7fff, 0x0, 0x1}) 21:16:38 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x10, 0x0, @offset=0xffffb716, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000040)) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0xffffd16a, 0x10001, 0x2025, 0x5, 0x0, 0x2}}) 21:16:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0xfdfdffff, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:38 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:39 executing program 3: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x6, @broadcast}, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x48000, 0x6, 0x4, 0x8, 0x2, {}, {0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "000000eb"}, 0x0, 0x0, @planes=&(0x7f0000000040)={0x7fff, 0x401, @fd}}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x8, 0x0, 0x1, 0x1, 0x80000000, 0xffffffff, 0x2e, 0xfffff001, 0x0, 0x1, 0x4, 0xef41, 0xfcbd, 0x14, 0xa, {0xfffffffa, 0x38}, 0x2, 0x1f}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x40, 0x4, 0x6, 0x7ff, 0xd198, 0x4, 0x674800, 0x7fffffff, 0x1f, 0x1ff, 0x1, 0x7ff, 0x0, 0x2e, 0x3ff, 0xff, 0x8, 0x9, 0x80000000, 0x800, 0x6, 0x8, 0xffffffff, 0xcf0, 0x7, 0x7ff, 0x3, 0x2, 0x1, 0x3, 0x10001, 0xfffffff8]}) 21:16:39 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80845663, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:39 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:39 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0xff000000, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:39 executing program 2: accept(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x103, 0x2, {0x7, 0xb25, 0xff, 0x2e3}}) 21:16:39 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7, 0x40, [], &(0x7f0000000080)=0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80845663, 0x0) 21:16:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x3, 0x103, 0x4, {0x2, 0x9, 0x200, 0x3}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1943.018034][ T3201] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1943.318335][ T3201] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1943.327135][ T3201] usb usb5-port1: attempt power cycle [ 1943.967990][ T3201] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1944.267685][ T3201] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1944.275950][ T3201] usb usb5-port1: unable to enumerate USB device 21:16:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) accept(r0, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000340)=0x80) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x10200, 0x0) syz_io_uring_setup(0x30e8, &(0x7f0000000040)={0x0, 0xd0a5, 0x2, 0x2, 0x2ee}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x4, 0x80000) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd=r3, 0x9, 0x5, 0x9, 0xc, 0x1, {0x3}}, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000280)=0x9473, 0x4) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:41 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0xfffffdfd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:41 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0xfffffffc, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) 21:16:41 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7, 0x40, [], &(0x7f0000000080)=0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:41 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x4, 0x0, @planes=0x0}) 21:16:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x1, 0xf9, 0x0, 0x0, 0x0, "7d444df6"}, 0x0, 0x4}) 21:16:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 3: getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3, 0x0, @planes=0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x2a2d1dbc}, 0x8) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @private=0xa010100}, {0x1, @multicast}, 0x40, {0x2, 0x3, @private=0xa010100}, 'bond0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x4c, 0x0, 0xe930, 0x100, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={r2, 0x3}, &(0x7f0000000280)=0x8) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2a0123, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x7, 0x9, 0x1}) 21:16:42 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x3, 0x0, 0x0, 0x0, "cc018f61"}, 0x0, 0x0, @userptr=0x36}) 21:16:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x5, 0x1, 0xd5d, 0x8, 0x5f7c, 0x40, 0x4}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0xc, 0x4, 0x10000, 0x2000000, {}, {0x0, 0x2}, 0x0, 0x0, @offset=0x5}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x0, 0x0, 0x3015, 0x7b3cec0e, 0x401, {0x4, 0x9}, 0x1}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x4, 0x9, @name="b3111e278092012b2c23a756424dde0034d9ae96230bdaa3d4cd532064f88984"}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x0, 0x0, 0x1, 0xe9f7, 0x2, 0x35fb, 0x10, 0x4}}) 21:16:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x3, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffd95, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000240)={0x100, 0xffffff80, @name="f2fbea4fbd120425e19d49b807e7ea9119e10e4b65607bf152465b29e8096a18"}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x100, 0x2, 0x4, 0x0, 0x20003ff, {0x77359400}, {0x5, 0x2, 0x5, 0xa6, 0x3b, 0x1, "e8de4a79"}, 0x80000001, 0x2, @userptr=0xfff, 0x400}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x80000000, 0x7, 0x4, 0x2000, 0x9, {0x77359400}, {0x1, 0x1, 0xc1, 0x4, 0x9, 0x9, "4dd8cde0"}, 0x8, 0x2, @planes=&(0x7f0000000040)={0x4, 0x7, @mem_offset=0x2, 0x9}, 0x2}) 21:16:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0xb, 0x102, 0x5, {0x1, 0x7, 0x7, 0xf1ec}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x5, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x8, 0x101, 0x2, {0x6, 0x6, 0x5, 0x7}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305602, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040)) 21:16:42 executing program 3: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "128b00"}, 0x0, 0x4, @fd=r0, 0x4}) 21:16:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x6, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0xafec, [], &(0x7f0000000040)=0x5}) 21:16:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_io_uring_setup(0x4f18, &(0x7f0000000040)={0x0, 0x18f9, 0x10, 0x3, 0x28d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 2: ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x8) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)={0xdead, 0x1, 0x4, 0x400, 0x2, {0x77359400}, {0x1, 0x0, 0x0, 0x7f, 0x60, 0x0, "6d273c02"}, 0x48000, 0x2, @fd=0xffffffffffffffff, 0xb3f0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)={0xffffffc1, 0x5, 0x4, 0x4000, 0xffffff70, {0x0, 0x2710}, {0x1, 0x2, 0x0, 0x84, 0x5a, 0xfe, "743f93ad"}, 0x1df, 0x3, @planes=&(0x7f0000000400)={0x7, 0x8, @fd=r1, 0x200}, 0x1000, 0x0, r2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0xff, 0x0, 0x0, "00000002"}, 0x0, 0x0, @planes=0x0}) socketpair(0x19, 0x2, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x8, {0x0, 0x27b41072, 0xce1, 0x8005}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000240)={{0x8, @rand_addr=0x64010101, 0x4e21, 0x1, 'sh\x00', 0x5, 0x507, 0x18}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 0x0, 0xee06, 0x9}}, 0x44) 21:16:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x7, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r1}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x0, 0x1, "ea61d2837e0cad7a0710d3aa7bd8e5088593dd91ff9b823c866a130d82764bee", 0x3, 0x9, 0x7fffffff, 0x8, 0x20}) 21:16:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x8, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x6, 0x2c23, @value}) epoll_create1(0x80000) 21:16:42 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x8, 0x9, 0x4, 0x800, 0x6, {0x0, 0x2710}, {0x4, 0x2, 0x0, 0xff, 0x1f, 0x1, "df4ea2e8"}, 0x4, 0x4, @offset=0xffff, 0x200}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x5, 0x9, 0x4, 0x400, 0x13a9, {0x77359400}, {0x5, 0x1, 0x8, 0x9, 0xab, 0x5, "faf74800"}, 0x8001, 0x2, @offset=0x4000000, 0x1}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:42 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0xd, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x6, 0x6, 0x6, 0x1ff, 0x6, 0x54, 0x1, 0xbc, 0x8, 0xc5aa, 0x0, 0x0, 0x8, 0x5, 0x800, 0x3, 0x8, 0x3, 0x7, 0x7, 0x0, 0x800, 0x100, 0x20, 0x2, 0xffff, 0x400, 0x10001, 0x9, 0x3c82, 0x8, 0x68e]}) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x5, 0x14000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x0, 0x4, 0x80000000, 0x1008, 0x7, 0x1, 0x4}) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x101, 0x455bba44fdd66e8c, {0x8, 0x320b, 0x4, 0x8e83}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) recvmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000000480)=""/230, 0xe6}], 0x5, &(0x7f0000000600)=""/225, 0xe1}, 0x100) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x2d1bec86b87c95eb, 0x0, 0x7, 0x0, 0x0, "cc019f61"}, 0xfffffffd, 0x0, @planes=0x0}) 21:16:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000040)={0x27ba, 0x6, "2418ca98837fb9d28c6899828f41ada457c3095addd2e2d4667553874a54ed4a", 0x3f, 0xfff, 0x10000, 0x9, 0x20c}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x9, 0xc, 0x4, 0x400, 0x401, {0x77359400}, {0x2, 0x0, 0x3, 0x9, 0x9, 0x1f, '\fo_>'}, 0xff, 0x1, @planes=&(0x7f00000000c0)={0x8001, 0x8, @mem_offset=0x4, 0x20}, 0xce2f, 0x0, r1}) 21:16:43 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x10, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x8, 0x1, 0x4, 0x1, 0x200, {0x0, 0xea60}, {0x5, 0xc, 0x9, 0x5, 0x84, 0x8, "f602ccba"}, 0x4, 0x1, @planes=&(0x7f0000000040)={0x6, 0x80, @mem_offset=0xfffffc01, 0x7913}}) 21:16:43 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x5, 0x1, 0x7, {0x76, 0x400, 0x5a, 0x10001}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 3: syz_usb_connect(0x6, 0x48c, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x7e, 0x50, 0x7f, 0xff, 0x846, 0x9041, 0xf466, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47a, 0x2, 0x1, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x86, 0x42, 0x7, 0xff, 0xff, 0xff, 0x3f, [], [{{0x9, 0x5, 0x4, 0x10, 0x40, 0x3f, 0x1f, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x17, 0xbb, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}, @generic={0x2, 0x2f}]}}, {{0x9, 0x5, 0x0, 0x18, 0x10, 0x7, 0x80, 0x1f, [@generic={0xca, 0x9, "dc422349b2417ed705382282bdaa81b5356ec7853e103a64fcd88c4f96853b03ada21cacd1b24b6635aa98115a2b95f9b52b7ed5b384606f4f839abef4e22a1c19f6bc5abeaeba18b917435a2a7131ec94942d4c0dc6c552843f517b8bcd1e5c02d8123d3150d0baa3940f5db043e0e2ff0266ca898503ba13e454f6eb4d7bff27b47aec35ddf6ea4c66abee0d90e753a32e18cb6c5143593faeb15f123d01711463d893a6c07237c81887d75b80b2d9846049ea0e57962b48e8ef575d5859e83161189c1c9c87f3"}, @generic={0x4b, 0x7, "81cadbbcfb2bee295f8341ad3e1e78d60af066e0757af4c0f7111eb884b15766d7142442f826c7998eb350d65885e3bb0cec9ce82418438b8d63c120b34de36c425737f6a9f89b1224"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x0, 0x4, 0x40, [@generic={0xfb, 0x24, "22b1a263eaca868f4351cd71099af4df4bea87686e06d008973224d3d062290bd133e5b05446eb8607fbe2963ef3b79376dbf7018e53f1a798fd0fac3a5065d6d69a3bb6cc61f69dc631cb90a4ae501c622eb79787189c0c083404b81cf2c67e0cdf2d97a461a61e1b7bbe51152bd52eba8ea12b741e313169b07815b99dabb2317d91ac456e07d35c0739a35021c7f110ca09651db9ecd96ccbb9571984989dae0b765ea482fd463af41aec5f5444f56e5c236ffbae48cb79c32eb128bad8acb68a0444b751171502ed2e1dad575ea7257db6cdfb0133771944b7920f4b464f9cf8e64ecde0e3c23d60ae7cba542ce88e3bc6fa33fea0a21d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x1f, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x1f, 0x3f}]}}, {{0x9, 0x5, 0xa, 0x2, 0x0, 0x3, 0x1, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0xdc, 0x5, 0x3}}]}}, {{0x9, 0x4, 0x6e, 0x3, 0x7, 0x35, 0xfd, 0xd7, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "81"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x80, 0x5, 0x42}, [@dmm={0x7, 0x24, 0x14, 0x800, 0x800}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2c}, @ncm={0x6, 0x24, 0x1a, 0x65dc}, @mdlm_detail={0x52, 0x24, 0x13, 0x9, "332c686489a4003c256c981877069caebbff7e66e82e139d4f13a037570d6dcd793418d96818a99cdeee2b8a0dfffb016a060612d1eb9adf151c12dd9ac991176aab7340c56ac5c5bbeeb00f53c1"}]}], [{{0x9, 0x5, 0x7, 0x3, 0x10, 0xfc, 0x3, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4b, 0x6}]}}, {{0x9, 0x5, 0x6, 0x12, 0x20, 0x6, 0x7f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x14, 0x7f}]}}, {{0x9, 0x5, 0x0, 0x586ad35ff972f162, 0x20, 0xe1, 0xb, 0x5, [@generic={0x5a, 0x2, "bb1bd1f885427f855b2d037b34db69e556d0638571406de5d59b42560304ac9f0400b4947462c3b1bd15aaf7acd4982da63c6898ce8ebf8508e384a11aed091accf851dca60a7b85aa777eea16efd7d30918ea6244f16fc7"}, @generic={0x53, 0x11, "4bc30555a13dcdf4afb7f71782dac8a81dcdbcaa1fb854a37ddd11e3ac00ce2231ecd1b78a9380f411efcbc09fa5c55a2a61e283c41c1bec17f740402e1a482bc55c26833debb23f1057e134a0eef32246"}]}}, {{0x9, 0x5, 0xe, 0x12, 0x20, 0x4b, 0x1, 0x1}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x1, 0x3, 0x7f}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xcd, 0x40, 0x0, [@generic={0x7c, 0xc, "6686e60a21aa7d8fcf58d5114ec4562f3d2df8eef4c30daf81cd4b4f39fc1c483ca46dd0d2b7164e4c3912e4c4043b397f87552063b3fb159b24df946147e0c223f144d4428db5e7d46a3659385cf753a74760c094d45959dbb8d30a650b2580fb146f5a89f93e8403c898ce7908755d7e94f0e43761de842e23"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xaf, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x3}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x6, 0x54, 0xfa, 0x40, 0x2}, 0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="050f7700060b100104990002040800fee41002005600020a1003000300053f09001b100bd7b74b0000c2f64588d60117ab85284b033008ccecd4ee9c3010018e0726128a16e068ab65a0490088720f4c641e646376000000000000f4f54d970b69163f791e821e0fb6c6f4680b10010c10000000ca0d1f"], 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1404}}]}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x12, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x8) 21:16:43 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000001c0)={0x55925bb, 0x6, @name="5c36139de8029c678ca145e35e9c9b859b3e9a8a426726923daba589cd379191"}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x80000001, @private2={0xfc, 0x2, [], 0x1}}}, 0x401, 0x200, 0x7f, 0x476464c1, 0x80, 0x8, 0xd6}, &(0x7f00000002c0)=0x9c) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @raw_data=[0x0, 0x6, 0x100, 0x20, 0x0, 0x1000000, 0x1, 0x6, 0x48, 0x7, 0x3, 0x7, 0x0, 0x1f, 0x0, 0xab7c, 0x199eff0b, 0x8, 0x0, 0x1ff, 0x7, 0x0, 0x4, 0x7fffffff, 0xcc00000, 0x6, 0x102, 0x6, 0xfffffff8, 0x7ff, 0x2, 0x80]}) 21:16:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x40002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000f, 0x10, r1, 0x8000000) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x7f, 0x5, 0x4, 0x0, 0x1, 0x9, 0x5, 0x6, 0x0, 0x8, 0x6, 0x401, 0x10001, 0x1, 0x7, 0x5070, 0x401, 0x1000, 0x101, 0x110001, 0x200, 0x9, 0x6, 0x9, 0xff, 0x40, 0x6, 0x3, 0x9a, 0xa1a, 0x2, 0x7fffffff]}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x149203, 0x0) r3 = socket(0x2, 0x1, 0x80000000) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000300)={0x5, 0x0, 0x4, 0x100, 0x1ff, {r4, r5/1000+60000}, {0x5, 0x1, 0x81, 0xc, 0x80, 0x6, "97da52ec"}, 0x0, 0x1, @fd, 0x173, 0x0, r2}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000001c0)={0x20, 0x1, "79fbe71fb95e1beddc4ad4834ce8584e6afe6a85a140f884483772e752209ec0", 0x8, 0x3, 0x3, 0xf152}) 21:16:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000180)={0x0, 0x40, 0x3010}) r3 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x1aa, 0x301000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)={0x1, 0x6, 0x4, 0x40, 0x2, {0x77359400}, {0x5, 0x0, 0x1, 0xc1, 0x4, 0x6, "ef586c63"}, 0x1000, 0x4, @offset, 0xfffffc00, 0x0, r4}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x8, 0x6, 0x4, 0x400, 0x10000, {}, {0x4, 0x8, 0x3f, 0xff, 0x20, 0x4, "fb1b00"}, 0x9a, 0x4, @fd=r2, 0x7, 0x0, r1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0xfff, 0x2, 0x6, 0x20, 0x1f1a63a, 0x7, 0xe}) 21:16:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x0, 0x1fc, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2, @planes=&(0x7f0000000180)={0xffffffff, 0x6, @mem_offset=0xd99, 0x8}, 0xfffffffe}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7f, 0x501100) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x100000, 0xc4, {}, {0x2, 0x2, 0x7, 0x1, 0xc1, 0x0, "8e2f8f8c"}, 0x7, 0x1, @userptr=0x2, 0x1, 0x0, r1}) 21:16:43 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x3, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x8, 0xd80) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000080)={0x7, 0x0, 0x1001, 0x3, 0x8001, {0x3, 0x3}}) 21:16:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x6, [], &(0x7f00000000c0)=0x6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x2, 0x0, 0x2015, 0xc7cc, 0x8, {0x5, 0x8001}}) 21:16:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:43 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0445624, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="8d0938db5cf6ca3d2c3b5b620ef34f637dfbd2d80ee9f7b1567ed77c4728e79411136ce8e78570604505c925965a317adaf144b04f53650cf50e5601a6eb23f007e929c0b084eb739ca0dfc7e01680e6d3e8c0f7b1e0aaad790f8438c7e2b9bd38cd9dd4844a72f5e79af4c15dcf3f066f0402f4", 0x74) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000003c0)=0x27eb, 0x4) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000300)={0x6, 0x3, 0x2, {0x115, 0x8, 0x3, 0x5}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x7, 0x9, 0x4, 0x100, 0x10001, {}, {0x0, 0x2, 0x1, 0x5, 0x81, 0x22, "ccb2f9a1"}, 0x2, 0x1, @userptr=0x583, 0x5, 0x0, r3}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0xffffffff, 0xdb1, [], &(0x7f00000000c0)=0x7f}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000240)={0x1, 0xb, 0x4, 0x800, 0xc11, {r6, r7/1000+10000}, {0x1, 0x0, 0x20, 0x9, 0x5, 0x1, "65dfc804"}, 0x4eccd1cb, 0x4, @offset=0xffffffff, 0x4, 0x0, r4}) ioctl$VIDIOC_G_JPEGCOMP(r5, 0x808c563d, &(0x7f0000000480)) 21:16:44 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, 0x0) 21:16:44 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x2, [0x40000, 0x7fff], 0x401}, 0x10) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_io_uring_setup(0x6f18, &(0x7f0000000180)={0x0, 0x71b6, 0x8, 0x2, 0x296}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000280)=0x4) syz_io_uring_setup(0x5cd9, &(0x7f0000000300)={0x0, 0x49f8, 0x8, 0x1, 0xc6, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000380)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a3cf740000002e6a225a44c095c3396a1561e93a66c0", @ANYRES16=r4, @ANYBLOB="000128bd7000fbdbdf2503000000080002000200000008000200020000000800010001000000080001000200000008000100030000000800010002000000"], 0x44}}, 0x40) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x1, 0x0, 0x1}, 0x1000) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x7}, 0x8) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0xe14, 0x1, 0x4, 0x4000, 0x0, {0x77359400}, {0x0, 0xc, 0xbd, 0x4, 0x7, 0xc6, "558ad31d"}, 0x1428, 0x4, @fd, 0x5, 0x0, r5}) 21:16:44 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 21:16:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x5, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x40, 0x8, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0xfd, 0x7, 0x40, 0x1, "015d0d6d"}, 0x9, 0x1, @fd, 0x4, 0x0, r7}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000340)={0x0, 0x2, 0x4, 0xc04, 0x7fffffff, {}, {0x2, 0x2, 0x3, 0x0, 0x0, 0x0, "860faa72"}, 0x3, 0x3, @userptr=0x9, 0xfb, 0x0, r9}) 21:16:44 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x2, 0x0, 0x2}, 0x0, 0x4, @fd}) 21:16:44 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, 0x0) 21:16:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0505609, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x6, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x990f}, @in6={0xa, 0x4e21, 0x565, @dev={0xfe, 0x80, [], 0x27}, 0x2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x2}, @in6={0xa, 0x4e21, 0xffff8000, @local, 0x8}, @in6={0xa, 0x4e24, 0x3, @remote, 0x10000}], 0x9c) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x10000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @raw_data=[0x81, 0x8, 0x4, 0x1000, 0x44c8, 0x4, 0x8001, 0xffffffff, 0x1, 0xffffffff, 0x2746, 0x6258, 0x7, 0x7, 0x81, 0x10000, 0x9, 0x3f, 0xfffffc00, 0x1, 0x36d5c317, 0x3, 0x6, 0x2, 0x1, 0xffff, 0x9, 0x80000000, 0xb46, 0x9, 0x1ecc, 0x9]}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0xe000, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "cc012afb"}, 0x0, 0x0, @planes=0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x2, 0x0, 0x6001, 0x860, 0x6, {0xce5a, 0x6}}) r4 = io_uring_setup(0x67c9, &(0x7f0000000340)={0x0, 0x5c73, 0x4, 0x2, 0x3b2}) r5 = accept(r3, &(0x7f0000000480)=@alg, &(0x7f00000003c0)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000500)='vegas\x00', 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x80010, r4, 0x10000000) r6 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x1, 0x200000) ioctl$VIDIOC_G_JPEGCOMP(r6, 0x808c563d, &(0x7f0000000180)) 21:16:44 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205649, 0x0) 21:16:44 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x5378, 0x2020, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x1f, 0xb, 0x4, 0x70000, 0x6, {}, {0x1, 0x0, 0x40, 0x7, 0x1, 0x5, "deff7a8e"}, 0x4, 0x2, @userptr=0x1, 0x3}) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f00000001c0)) ioctl$VIDIOC_PREPARE_BUF(r2, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc050560f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x7, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0505611, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fbdbdf2501000000080001000200000008000100000000000800020002009b56fa8e00000800010003000000080002000200000008000200020000000800"/83], 0x5c}, 0x1, 0x0, 0x0, 0xc010}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) 21:16:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)='netdevsim0\x00', 0x7, 0x3, 0x7ff}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000200)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xe) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x1f, 0x30, 0x5, 0x6dd}, &(0x7f0000000300)=0x18) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0xddb, 0x6, @name="9b10db625cc491ab8fb5688cc5526976bf0e6977cb4d0dc593957744a18571b4"}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000280)=0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @fd}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000180)=""/202, 0xca}}, 0x10) 21:16:44 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x40, 0x8, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0xfd, 0x7, 0x40, 0x1, "015d0d6d"}, 0x9, 0x1, @fd, 0x4, 0x0, r7}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000340)={0x0, 0x2, 0x4, 0xc04, 0x7fffffff, {}, {0x2, 0x2, 0x3, 0x0, 0x0, 0x0, "860faa72"}, 0x3, 0x3, @userptr=0x9, 0xfb, 0x0, r9}) 21:16:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc050565d, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x300, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x8, 0x2, 0x6, 0x20, 0x8, 0x0, 0x8}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0xaa48, 0x0, 0x2006, 0x479, 0x6, {0x9, 0x200}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x10000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, "cc019f61"}, 0x0, 0x1, @planes=0x0}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) 21:16:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x208001, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x80, 0xb, 0x4, 0x400, 0x1, {0x77359400}, {0x6, 0x1, 0x5, 0x6b, 0x7f, 0x0, "69b96283"}, 0x100, 0x1, @userptr=0x2, 0x3, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x2, 0x7, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2, @fd=r1, 0x0, 0x0, r2}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x6, 0x67, "b8835def1839032c79594378abf105d5da93b3151b3dd8d59048b234764f3ac14749ec10effe9d81f435a408d9b7bfe57f985699920f74322377289ffefb6f07f50d988339eb5a22f8eecd606e4619c9518dfa1efc689961b977d3654672d40ba32c1e2a0837b7"}, 0x6f) 21:16:44 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x40, 0x8, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0xfd, 0x7, 0x40, 0x1, "015d0d6d"}, 0x9, 0x1, @fd, 0x4, 0x0, r7}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000340)={0x0, 0x2, 0x4, 0xc04, 0x7fffffff, {}, {0x2, 0x2, 0x3, 0x0, 0x0, 0x0, "860faa72"}, 0x3, 0x3, @userptr=0x9, 0xfb, 0x0, r9}) 21:16:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x3, @planes=0x0}) 21:16:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x500, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket(0x6, 0x5, 0x7f) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x3a, 0x3, 0x4, 0x401, 0x5, {r6, r7/1000+60000}, {0x5, 0x8, 0x3f, 0x40, 0x0, 0x3f, "f42bb3fa"}, 0x7c, 0x2, @offset=0x3, 0x15b, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x18, 0xdf08098cc2071066, 0x4, 0x40, 0x9, {r3, r4/1000+10000}, {0x3, 0xc, 0x1, 0x6, 0x0, 0xd1, "558d7d86"}, 0x7, 0x1, @fd=r5, 0x7, 0x0, r8}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @window={0x3, 0x5, 0x8}, @mss={0x2, 0x1}, @window={0x3, 0x400, 0x6}, @sack_perm, @timestamp], 0x6) 21:16:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {r1, r2/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2, @planes=0x0}) 21:16:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x42480) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000180)={0x7, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7d2}, 0x8) 21:16:44 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x40, 0x8, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0xfd, 0x7, 0x40, 0x1, "015d0d6d"}, 0x9, 0x1, @fd, 0x4, 0x0, r7}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000340)={0x0, 0x2, 0x4, 0xc04, 0x7fffffff, {}, {0x2, 0x2, 0x3, 0x0, 0x0, 0x0, "860faa72"}, 0x3, 0x3, @userptr=0x9, 0xfb, 0x0, r9}) 21:16:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x600, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x8, 0x3, 0x400, 0x20, 0x10001, 0x8}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x7, 0x8, 0x0, 0x0, 0x0, 0x0, "3585075d"}, 0x0, 0x0, @planes=0x0}) 21:16:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x64010101, 0x4e23, 0x4, 'none\x00', 0x5, 0x0, 0x10}, 0x2c) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 4: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x6f4a, 0x101, "ba6c4e7b7198003190a555ddef8fac38348a55c7b510574a21bb9dd41480c713", 0x8, 0x7, 0x0, 0x3, 0x100}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc018f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x40, 0x8, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0xfd, 0x7, 0x40, 0x1, "015d0d6d"}, 0x9, 0x1, @fd, 0x4, 0x0, r7}) 21:16:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x700, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1948.664671][T19116] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 1948.686908][T19120] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 21:16:45 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x18cfc5b7f7d3e30c, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000040)={0x0, 0x5, 0x6, 0x100, 0x0, 0x9e, 0x4}) 21:16:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 2: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x6, "c89e248a48bbcb870b11a999b72c17838b450ee6a863ee4782d116ec97a64097", 0x2, 0x1ff, 0x3, 0x0, 0x0, 0x2}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000200)={0xbd, 0x100, "97a22a7dede76a43e553172dc808e0945b1b9636ae2cdcdf9497a0b02069b137", 0x7ff, 0x3, 0xfffffff7, 0x1ff, 0x310}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000180)={0x9, "f5c98b18a168f4360472cab29e3184a81481b17c6d98c7ddadf6bd0213385f22", 0x3, 0xe1, 0x3, 0xff, 0x4040204, 0x4}) 21:16:45 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x3, 0x96a, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, &(0x7f0000000040), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x2}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x1e, 0x3, 'veth0_to_bond\x00', 'veth0_virt_wifi\x00', 'team_slave_1\x00', 'ip6tnl0\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x2d6, 0x34e, 0x39e, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x27, [{0x9, 0x3f, 0x5, 0x4}, {0xfd, 0x80, 0x1f, 0xffffffc0}, {0x560, 0x81, 0xac, 0x1000}, {0xeeb7, 0x9, 0x0, 0x8}, {0x2, 0x4, 0xe, 0xffffffff}, {0x6, 0x7, 0x0, 0x3}, {0x6, 0x9, 0x1, 0x6}, {0xf9, 0x0, 0xc7, 0x3}, {0x9, 0x8, 0x4, 0x9}, {0x1, 0x72, 0xb9, 0x6}, {0xb0, 0xf9, 0x1, 0x6c}, {0xe, 0x2, 0xf6, 0x4c}, {0x80, 0xcf, 0x20, 0x1000}, {0x9, 0x6, 0x7, 0x80000000}, {0x5, 0x5, 0x5, 0x78}, {0x6d8e, 0x10, 0x49, 0x4}, {0x0, 0x3f, 0xce, 0xfffff5fc}, {0x41, 0x2, 0xae, 0x8b}, {0x86, 0x2, 0xa2, 0x1}, {0x8001, 0x3f, 0x7f, 0x4}, {0x4, 0xfe, 0x8b}, {0x9, 0x22, 0xfc, 0x636e798}, {0x5, 0x8, 0x9, 0x80000001}, {0x8000, 0x8, 0x2, 0xffffffff}, {0x6, 0xf7, 0x3, 0x6}, {0x0, 0x7, 0x0, 0x1}, {0x1, 0x4, 0x5, 0x2}, {0x4, 0x7, 0x8, 0x270f}, {0x8001, 0x4, 0x5, 0x40}, {0x3ff, 0x0, 0x8, 0x6}, {0xffda, 0xf8, 0x3, 0x9}, {0x20, 0x2, 0x1, 0x7}, {0x155, 0x8, 0x3f, 0xffffff2e}, {0x3, 0x8, 0x6, 0x5}, {0x400, 0x3, 0x73, 0x9}, {0x2, 0x0, 0x80, 0x7ff}, {0x0, 0x0, 0xab}, {0x81, 0x5, 0x40, 0x52}, {0x4, 0x6, 0xff, 0x2}, {0xfff9, 0x66, 0x1d, 0x90}, {0x3, 0x61, 0x4f, 0x8}, {0xc47e, 0xff, 0x1a, 0x6}, {0x8, 0x6, 0x9, 0x81}, {0x8000, 0x5, 0x2, 0xfc0c}, {0x4, 0x7, 0x20, 0xfffff4af}, {0x5, 0x6, 0x40, 0xa3}, {0x101, 0x7, 0x20}, {0x7683, 0x9, 0x10}, {0x800, 0xbd, 0x2, 0x4}, {0x1000, 0x7f, 0x90, 0x1}, {0x6d5, 0x1, 0x5, 0x55c}, {0xe67e, 0x6, 0x81, 0x7ff}, {0x2, 0x7, 0x4, 0xcdec}, {0x81, 0xbd, 0xc0, 0x7}, {0x1, 0x7f, 0x3, 0x9}, {0x0, 0x4, 0x1f, 0x93}, {0xfff, 0x8, 0xff, 0x7f}, {0x1ff, 0x20, 0x1f, 0x3}, {0x6d28, 0x8, 0x7, 0x9}, {0x401, 0x2, 0x7f, 0x80000001}, {0x3, 0x6e, 0x7, 0x52c}, {0x4, 0x5, 0x4, 0x3}, {0xfffb, 0x2, 0x7, 0xff}, {0x1, 0x81, 0x7}], {0x8}}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7f, 0x94, {0x7ff}}}}], @common=@log={'log\x00', 0x28, {{0x9, "4efab60799858cf624ec7fe333a7ee466d7832aa44c6c3fa978494084e1d"}}}}, {0x3, 0x4, 0x16, 'geneve1\x00', 'erspan0\x00', 'wlan0\x00', 'team_slave_1\x00', @local, [0x0, 0x0, 0x1fe, 0xff, 0x0, 0xff], @dev={[], 0x37}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x136, [], [@common=@nflog={'nflog\x00', 0x50, {{0x9, 0x6, 0x8001, 0x0, 0x0, "931b6279f3a56ffb769e434b406052c05d90e3f4960b6915693848c1b1f60d92c3b5f9e9ef121c4122a0e2e86257f8223e50e4035d844b83e8c5eb79cc7ba249"}}}], @common=@log={'log\x00', 0x28, {{0x9, "a966f2ff59240de9c9204e8d16d1f9970bd5d81e4a7d39078974a377567a", 0x2}}}}]}, {0x0, '\x00', 0x2, 0x1, 0x1, [{0x9, 0x20, 0x8884, 'bond_slave_1\x00', 'erspan0\x00', 'veth0_to_team\x00', 'veth0_to_bridge\x00', @remote, [0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff], 0x2a6, 0x2a6, 0x3d6, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x11, [{0x1, 0x3, 0xc7, 0x3}, {0x4, 0x5, 0x6, 0x1}, {0x4, 0x1, 0x0, 0x7}, {0x7, 0x80, 0x40, 0x20}, {0x401, 0x1, 0x40, 0xde2}, {0x3, 0x9, 0x40, 0x7}, {0x7fff, 0xf6, 0x7f, 0x10000}, {0x401, 0x8, 0x81, 0xfffffffe}, {0x4, 0xe2, 0x4, 0xd8}, {0x7, 0x2f, 0x5d, 0x45e993a1}, {0x1, 0x8, 0x81, 0x7fff}, {0xfff8, 0x8, 0xe2, 0x1}, {0x2, 0x5, 0x7f, 0x8}, {0x1, 0x2, 0x8, 0x3}, {0xa7, 0x0, 0x5b, 0x8}, {0x6, 0x75, 0x6, 0x5}, {0x6, 0x80, 0x0, 0x1}, {0x6, 0x4, 0x9, 0xdea}, {0x9, 0x20, 0x7, 0x3f}, {0x3, 0x1, 0x3, 0x1ff}, {0x6, 0x9, 0x6, 0x81}, {0x7fff, 0x9, 0x47, 0x5}, {0x8, 0x9, 0xff, 0xbd3}, {0x2, 0x1f, 0x5, 0x80000000}, {0x3, 0x80, 0x5, 0x3fe00}, {0x40, 0x2, 0x6, 0x4}, {0x3, 0x20, 0x3f, 0x1}, {0x59, 0x4, 0x6, 0x7}, {0x2, 0x7f, 0xa9, 0x4}, {0x0, 0x7, 0x5, 0x7}, {0x4, 0x8, 0x8, 0x98080000}, {0x6, 0x0, 0x1, 0x9}, {0x0, 0x0, 0x2, 0x6b012989}, {0x0, 0xff, 0x6, 0x200}, {0xff, 0x9, 0x0, 0x1}, {0xfeff, 0x7, 0xff, 0x1ff}, {0x49, 0x80, 0x5, 0x9}, {0xfff, 0x7f, 0x1, 0x3}, {0xfffc, 0x1, 0x5, 0x3b2}, {0x1, 0x40, 0xb5, 0x80000001}, {0xf1d5, 0x81, 0xc0}, {0x5, 0x1, 0x1, 0xfbf8}, {0x1f, 0x6, 0x1f, 0x1}, {0x7fff, 0xff, 0x7f, 0x8001}, {0x2, 0x0, 0xff, 0x2}, {0x6, 0x0, 0x26, 0x2}, {0x9, 0x8, 0x20, 0x9}, {0xfffb, 0xa9, 0x81, 0x10000}, {0x8, 0x7, 0x1f, 0x9}, {0x3f, 0x1f, 0x7d, 0x7}, {0x0, 0x3, 0x7f, 0x80000000}, {0x80, 0x61, 0x8, 0xe4}, {0x800, 0x80, 0x2, 0x1}, {0x81, 0x6c, 0xe1, 0x8}, {0x8, 0x8, 0x4, 0x142fe025}, {0x200, 0xc2, 0x80, 0xe20}, {0x2, 0x4, 0x1, 0x3}, {0x7, 0x1, 0x9}, {0x3, 0x6, 0xd4, 0xfff}, {0x0, 0x82, 0xd6, 0x4}, {0x8000, 0x7f, 0x20, 0x7}, {0xbfd, 0x45, 0x8, 0x101}, {0x3, 0x54, 0x81, 0x8597}, {0x9, 0xff, 0x5, 0x3}], {0x80000001}}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:lirc_device_t:s0\x00'}}}}]}]}, 0x9e2) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, 0x0) 21:16:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x4, 0x8, "5be5c93798717750edf0d00c5b58b5267cc53692dba4b0cd280796539f46309b", 0x7fff, 0x9, 0xd9, 0x401, 0x110}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0xff00, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="914173b97848cb6a458ceb78a07247f3", 0x10) 21:16:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 4: r0 = socket$inet(0x2, 0x2, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e23, 0xffff, @ipv4={[], [], @local}, 0x1ff}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x7}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0xffffffff}, @in={0x2, 0x4e21, @multicast2}], 0xa0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x758, 0x40000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x1ff, 0x1, 0x4, 0x2000, 0x401, {r4, r5/1000+10000}, {0x5, 0x1, 0x3f, 0x8f, 0x81, 0x0, "7e13ea74"}, 0x8, 0x3, @planes=&(0x7f0000000300)={0x41, 0x2, @userptr=0x4, 0x7f0}, 0x9}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0x80000001, 0x3, 0x4, 0x100, 0xfffffff9, {0x0, 0x2710}, {0x1, 0x1, 0x7, 0x81, 0x3, 0x5, "cda574dd"}, 0x4, 0x1, @planes=&(0x7f0000000080)={0xd6, 0x0, @userptr=0x14, 0x4}, 0x40, 0x0, r6}) 21:16:45 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2, @planes=0x0}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x6, [], &(0x7f0000000040)=0x5}) 21:16:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) 21:16:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001640)={&(0x7f0000000040)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/172, 0xac}, {&(0x7f0000001540)=""/129, 0x81}], 0x4, &(0x7f0000001600)=""/41, 0x29}, 0x100) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x61, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) recvmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000240)=@phonet, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f00000000c0)}], 0x3}, 0x2140) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$swradio(&(0x7f0000001680)='/dev/swradio#\x00', 0x1, 0x2) 21:16:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x1000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845657, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x290c81) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000240)={0x0, 0x10001, 0x2021}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000280)={0x33dc, 0x1ff, @name="7e6da6fa402bb4dfe8a9d4761172a0c44648115505ec4d96baa54b6a02063c33"}) ioctl$VIDIOC_PREPARE_BUF(r3, 0x5421, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x100000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) 21:16:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x4, 0x102, 0x2, {0x1, 0x5, 0xb51, 0x7}}) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000280)={0x8, "bfe11a78d5c852d89bda37e25a520c9a44de3c2494aa986f4b995b63f3a1fbc5", 0x1, 0xff, 0x5, 0x20, 0x3000805, 0x2}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x3}, 0x8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1, 0x1016, 0x1}) 21:16:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x2000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/schedstat\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffd4b, 0x8, 0x0, {0x77359400}, {0x4, 0x1, 0x0, 0x0, 0x0, 0x0, "c803504f"}, 0x0, 0x0, @planes=&(0x7f0000000240)={0x0, 0x7, @fd=r1, 0x5}, 0x10000000, 0x0, 0xffffffffffffffff}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000005c0)={0x0, @llc={0x1a, 0x205, 0x20, 0x14, 0x6, 0x20, @broadcast}, @isdn={0x22, 0x6, 0xff, 0x6, 0xff}, @qipcrtr={0x2a, 0xfffffff8}, 0x7, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000580)='batadv_slave_1\x00', 0x2c53, 0xb4, 0xff61}) clock_gettime(0x0, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000300)={0x1, 0x3, 0x4, 0x400, 0x1f, {0x77359400}, {0x5, 0x2, 0x9, 0x7f, 0xff, 0x40, "d01939c0"}, 0x9, 0x1, @planes=&(0x7f00000002c0)={0x7fe, 0x7, @fd=r2, 0x4}, 0x0, 0x0, r3}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xe) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)={0x2, 0x6, 0x4, 0x1, 0x80000000, {0x77359400}, {0x0, 0x1, 0x80, 0x6, 0x40, 0x0, "2682245e"}, 0x377, 0x1, @fd, 0x8000, 0x0, r7}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f00000001c0)={0x0, 0x0, @name="febc2c9ebbf5c61bc85775e90726d3cbc476004db38e0dc6a1d8fbde3e4972c3"}) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x1) r9 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x7fff, 0x0) ioctl$VIDIOC_G_PRIORITY(r9, 0x80045643, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0x5, 0x0, [], {0x0, @reserved}}) 21:16:45 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x28e00) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x4, 0x0, {}, {0x1, 0x1, 0x0, 0x0, 0xf9, 0x0, "cc019f61"}, 0x7160c327, 0x0, @userptr=0x80000000, 0xfffffffc}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) 21:16:45 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r0, 0x8, 0x0, r0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r2, r3/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r0, 0x4, 0x0, r5}) 21:16:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x3000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, {0xf2, 0x8001, 0x9, 0x7}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x80000000, 0xd7b, @name="44d5532476b2a1073dd7ae9ba1bc79bbb762f0d1f1293205c20fd39055451f18"}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x4000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:45 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x10000, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x2, 0x1, 0x4, 0x10, 0x7, {0x0, 0x2710}, {0xaee98632b7812a6e, 0xc, 0x4, 0xf8, 0x0, 0x6, "a6ba4c6f"}, 0xfffffff8, 0x1, @userptr=0x4bb, 0x526}) 21:16:45 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r0, 0x8, 0x0, r0}) 21:16:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x5000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0d05604, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x800, 0x8, "fb5617b3f1e092adc6bac7242332198506847205217bb8cece40ab697ca78ae3", 0x27, 0x5, 0x2, 0x1, 0x220}) r1 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x8, 0x101000) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200)) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x0, 0x3, 0x3, {0x50000000, 0x1, 0x1, 0x7}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x0, 0x0, {}, {0x2, 0x1, 0x0, 0x0, 0xff, 0x0, "cc019f61"}, 0x4000000, 0x0, @planes=0x0, 0x44}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) 21:16:46 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0d05605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x3, 0xff3, 0x1, 0x1f, 0x3, 0x8}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000040)={0x3, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "f3058e41"}, 0x1000000, 0x0, @fd, 0xfffffffe}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0x90, 0x5d, 0x9, 0x6}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000280)={0x3, 0x0, [], {0x0, @bt={0xfffffffa, 0x180, 0x0, 0x1, 0x7, 0x2, 0x0, 0x2, 0x6dd, 0x3, 0xfff, 0x1, 0x800, 0x0, 0x3, 0x2c, {0x3, 0x9}, 0x80, 0x5}}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @bt={0x0, 0x2, 0x3, 0xd067, 0xfffffffffffffffd, 0x9, 0x6, 0x3}}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000200)={0x30000, "54b248350358f118a048874260a9d43925b42d91c60b31ea2ecd78a9dd37bf10", 0x2, 0x1, 0x0, 0xb000, 0x40000, 0x4}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xcbc8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x6) 21:16:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x6000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:46 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x5, 0x5, 0x1, 0x400, 0x9, 0x89, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0xf8000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x1, 0x5, "46b5f5d98066889fcb09dda346103aa83ee1f386ff5a236f588206fd2bcb6cd8", 0x8, 0x4, 0x6, 0x80000000, 0x80}) 21:16:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0d05640, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @remote, 0x4e23, 0x2, 'rr\x00', 0x10, 0x0, 0x12}, 0x2c) 21:16:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x7000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x2, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x8000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xde3, 0x98400) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x6, 0x12000000, 0x6, 0x9, 0x7f, 0x5, 0x80000000, 0x7ff, 0x4, 0x4, 0x8000, 0x7, 0xffffffe0, 0x43, 0x2, 0x8, 0x4, 0xe00000, 0x7f, 0xc478, 0x7ff, 0x7fff, 0x2, 0x341, 0x3, 0x9, 0x7, 0xfd, 0x6, 0x9227, 0x3]}) 21:16:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r1, 0x0, 0x0) accept(r1, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x8001, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000200)={0x0, 0x400, 0x200, [], &(0x7f00000001c0)=0x4}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x81, "cd019f61"}, 0xfffffffe, 0x0, @offset=0x107}) 21:16:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0xfdfdffff, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x2, 0x0, @value}) 21:16:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "692e9f61"}, 0x1, 0x0, @planes=0x0, 0xfff}) 21:16:46 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0xff000000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x3, 0x0, @value}) 21:16:46 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000180)={0x0, 0x0, @name="f64e9ec256e5f03f25d267c1a7f20ddcbc6ef6065116ad48054d9e405ce47cfe"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x200480) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x804, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x5}, 0x8) ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x7) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0x2, &(0x7f0000000100)={0xfffffffe, 0x6, 0x4, 0xe000, 0xcb, {r4, r5/1000+10000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, @planes=&(0x7f0000000240)={0x2b, 0xb2, @userptr=0x3, 0x2}, 0x0, 0x0, r1}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300)=0x7, 0x4) 21:16:46 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x1, @planes=0x0}) 21:16:46 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:47 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x4, 0x0, @value}) 21:16:47 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0xfffffdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:47 executing program 4: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @local}, 0xc) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @loopback}, {0x307, @dev={[], 0x30}}, 0x46, {0x2, 0x4e21, @empty}, 'ipvlan1\x00'}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:47 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:47 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:47 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @can, @sco={0x1f, @fixed={[], 0x12}}, @l2tp={0x2, 0x0, @multicast1, 0x3}, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x4, 0x9}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @offset=0xe}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0xffffffff, 0x5, 0x1000, 0x200, 0x1fe, 0x80000000, 0xa}) 21:16:47 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:47 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x5, 0x0, @value}) 21:16:47 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:47 executing program 4: getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={r0, @in={{0x2, 0x4e21, @private=0xa010100}}}, &(0x7f0000000380)=0x84) r1 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000005c0)={r0, 0x4}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000640)={r2, 0x200}, 0x8) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000001c0)={0x0, 0x200, 0x5, [], &(0x7f0000000180)=0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000200)={0x6, 0x3, "5ed9667229ce5926f2e7d2de2fa7bfa2ee403eaf7bd43b878f8faf91a0a2b5fc", 0x4, 0x4, 0x1, 0xffffffaf, 0x300}) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0x4, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_PREPARE_BUF(r3, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:47 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:47 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x2, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0300"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x1, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000500)) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x2, 0x9, 0x4, 0x2000, 0x1000, {r4, r5/1000+10000}, {0x2, 0x0, 0x0, 0xf8, 0xc5, 0x3, "7ba5bc66"}, 0x8, 0x1, @fd=0xffffffffffffffff, 0x81, 0x0, r1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r11, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000280)={0xfffffffa, 0x9, 0x4, 0x40, 0x10001, {r9, r10/1000+60000}, {0x5, 0x0, 0x5, 0x20, 0xff, 0x6, "1ca99035"}, 0xfbf, 0x1, @fd=r11, 0x9}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)={0xb1, 0x1, 0x4, 0x20, 0x8, {r2, r3/1000+60000}, {0x6, 0x0, 0x3f, 0x8, 0xb4, 0xbf, "fefb0078"}, 0x7, 0x1, @fd=r6, 0xac, 0x0, r7}) r12 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x200, 0x410c00) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r15 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x4000000000000, 0x101003) ioctl$vim2m_VIDIOC_DQBUF(r12, 0xc0585611, &(0x7f0000000480)={0x6, 0x1, 0x4, 0x4, 0x6, {r13, r14/1000+10000}, {0x3, 0x0, 0x3e, 0x3, 0x8, 0x0, "67a4a8d3"}, 0x9, 0x3, @userptr=0x200, 0x3a30, 0x0, r15}) 21:16:47 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x6, 0x0, @value}) 21:16:47 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:47 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:47 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, 0x0) 21:16:47 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x7, 0x0, @value}) 21:16:47 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x4, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:47 executing program 0: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x8, 0x10d, "39fdbf70ddbb78e922a203b7113bd10c1449d68f4d1a74c63636db06948b7099", 0x3, 0xfffff669, 0x0, 0x842, 0x2ee}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:47 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, 0x0) 21:16:47 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0x0, @value}) 21:16:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x5, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:48 executing program 0: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:48 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0905664, 0x0) 21:16:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x8, 0x10d, "39fdbf70ddbb78e922a203b7113bd10c1449d68f4d1a74c63636db06948b7099", 0x3, 0xfffff669, 0x0, 0x842, 0x2ee}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x300, 0x0, @value}) 21:16:48 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x5) r1 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @fd=r0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000000)="91fce0e41881b3f2", 0x8) recvmsg$can_j1939(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/177, 0xb1}, {&(0x7f0000000180)=""/13, 0xd}], 0x2, &(0x7f0000000240)=""/51, 0x33}, 0x100) socketpair(0xf, 0x6, 0x80000000, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x5}, 0x8) 21:16:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x2, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x6, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:48 executing program 3: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:48 executing program 0: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x500, 0x0, @value}) 21:16:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x100, 0x0, {r3, r4/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "03019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r2}) 21:16:48 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x600, 0x0, @value}) 21:16:48 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:48 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80000001) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000e689"], 0x6) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x101, 0x0, 0x10001}, 0xa32) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x4433, 0x9e2, 0x81, 0x4, 0x800, 0x9, 0x11, 0x8}}) 21:16:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:48 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x700, 0x0, @value}) 21:16:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:48 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x8, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:48 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x7fffffff, 0xfff, @value=0x20}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x10, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:48 executing program 0: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:48 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xff00, 0x0, @value}) 21:16:48 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x300, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:48 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xa3c2}, @in={0x2, 0x4e20, @multicast2}], 0x3c) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x8, 0x8, 0x10001}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={r1, 0x401}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r2, 0x9}, &(0x7f0000000240)=0x8) 21:16:48 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:48 executing program 0: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x99800, 0x0, @value}) 21:16:49 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x500, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 0: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x5, 0x3, [], &(0x7f0000000040)=0xc0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x7, {0x4, 0xb17, 0x8000, 0xffff}}) 21:16:49 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x600, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/schedstat\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffd4b, 0x8, 0x0, {0x77359400}, {0x4, 0x1, 0x0, 0x0, 0x0, 0x0, "c803504f"}, 0x0, 0x0, @planes=&(0x7f0000000240)={0x0, 0x7, @fd=r1, 0x5}, 0x10000000, 0x0, 0xffffffffffffffff}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000005c0)={0x0, @llc={0x1a, 0x205, 0x20, 0x14, 0x6, 0x20, @broadcast}, @isdn={0x22, 0x6, 0xff, 0x6, 0xff}, @qipcrtr={0x2a, 0xfffffff8}, 0x7, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000580)='batadv_slave_1\x00', 0x2c53, 0xb4, 0xff61}) clock_gettime(0x0, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000300)={0x1, 0x3, 0x4, 0x400, 0x1f, {0x77359400}, {0x5, 0x2, 0x9, 0x7f, 0xff, 0x40, "d01939c0"}, 0x9, 0x1, @planes=&(0x7f00000002c0)={0x7fe, 0x7, @fd=r2, 0x4}, 0x0, 0x0, r3}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xe) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)={0x2, 0x6, 0x4, 0x1, 0x80000000, {0x77359400}, {0x0, 0x1, 0x80, 0x6, 0x40, 0x0, "2682245e"}, 0x377, 0x1, @fd, 0x8000, 0x0, r7}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f00000001c0)={0x0, 0x0, @name="febc2c9ebbf5c61bc85775e90726d3cbc476004db38e0dc6a1d8fbde3e4972c3"}) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x1) r9 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x7fff, 0x0) ioctl$VIDIOC_G_PRIORITY(r9, 0x80045643, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0x5, 0x0, [], {0x0, @reserved}}) 21:16:49 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x700, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x5, 0x200f}) 21:16:49 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0xff00, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x6, 0x3, 0x4, 0x2000, 0x101, {0x77359400}, {0x5, 0x1, 0xc0, 0x2, 0x8, 0x0, "8b593313"}, 0x0, 0x1, @offset=0x8, 0x1, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980901, 0x0, @value}) 21:16:49 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x1000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980902, 0x0, @value}) 21:16:49 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x2000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980903, 0x0, @value}) 21:16:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2043, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x53, 0x2, 0x4, 0x4000, 0x7ff, {}, {0x3, 0xc, 0x8, 0x6, 0x0, 0x0, "7d2b81b4"}, 0x1f, 0x1, @offset=0x8000, 0x4, 0x0, r1}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000180)={0x7, "120f8780562cad9ab74fd314f21b55cc16728ab2148142a0e408c28c09be2bce", 0x2, 0x4e, 0x5, 0x1000, 0x20, 0x4}) 21:16:49 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980914, 0x0, @value}) 21:16:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x3000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:49 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x8362, {}, {0x1, 0x0, 0x0, 0x0, 0xfc, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r1}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) 21:16:50 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:50 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:50 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980915, 0x0, @value}) 21:16:50 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)="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", 0xfd) socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0xff, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980)='/dev/nvram\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000009c0)=0x2, 0x4) 21:16:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x4000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, 0x0) 21:16:50 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf00001, 0x0, @value}) 21:16:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x9, 0x400, 0x300b, 0x1, 0x6, 0x3, 0x1, 0x2}}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000001c0)) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0xb, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000002c0)={0x3, 0xe9b, @value=0x3}) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) 21:16:50 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x5000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, 0x0) 21:16:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, 0x0) 21:16:50 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf0f002, 0x0, @value}) 21:16:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000280)={0x9, 0x0, 0x1001, 0x4, 0xb1, {0x5, 0x8}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0xffff, 0x0, 0x2019, 0x7c3a, 0x1, {0x4, 0x9}}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_getres(0x4, &(0x7f00000003c0)) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000200)={0x8f5a, 0x6, 0x4, 0x10000, 0x1000, {r5, r6/1000+60000}, {0x3, 0xc, 0x4, 0x0, 0x9, 0x0, "df818d27"}, 0x400, 0x3, @planes=&(0x7f00000001c0)={0x4, 0xf5c, @userptr, 0x8}, 0xd6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x5, 0x0, 0xf, 0x0, 0x0, {r2, r3/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xffffffff, 0x0, @planes=0x0, 0x5}) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)={0x2, 0x3, 0x4, 0x10, 0x5, {0x0, 0xea60}, {0x3, 0x2, 0x5, 0x1, 0x4, 0x20, "e84d83d3"}, 0x10001, 0x4, @planes=&(0x7f0000000300)={0xffffabe2, 0x7, @mem_offset=0xc8, 0x3ec}, 0x5, 0x0, r1}) 21:16:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0e85667, 0x0) 21:16:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x6000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x1000000, 0x0, @value}) 21:16:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, 0x0) 21:16:50 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x7, 0x4, 0x400, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0945662, 0x0) 21:16:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x7000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x1009800, 0x0, @value}) 21:16:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0xfffff001, 0x9, @name="6afe7daaf4526ec32d18a055e0d3bfa27ae44d055b7f928488bd07a9f1b70b2d"}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:50 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x8000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:50 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x7, 0x4, 0x400, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x100f000, 0x0, @value}) 21:16:50 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x1099800, 0x0, @value}) 21:16:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x101, 0x2, {0x69c, 0x5, 0x7, 0x51e8}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000340)={0x8, 0x0, 0x1017, 0x6, 0x3, {0xe7, 0x46}, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0xb89, 0x2, 0x4, 0x400, 0x7, {}, {0x6, 0xc, 0xd3, 0x5, 0x27, 0x5, "31f2a0da"}, 0x8, 0x4, @offset=0x3, 0x1, 0x0, r1}) r5 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r5, 0x808c563d, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f00000002c0)={0x9, 0x8, 0x4, 0x10000, 0x51f, {r6, r7/1000+10000}, {0x1, 0x1, 0xfa, 0x9, 0x50, 0x1, "8388e4b4"}, 0x7fff, 0x3, @planes=&(0x7f0000000280)={0xff2, 0xd564, @mem_offset=0x7, 0x6}, 0x6}) 21:16:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:50 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0xfdfdffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:51 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x2000000, 0x0, @value}) 21:16:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x8, 0x100, 0x0, {0x6, 0x6, 0x4, 0x2}}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000040)={0x1, 0x5, 0x101, 0x200, 0x6, 0x5, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x4, 0x4, 0x1f, 0x7fffffff, 0x2006, 0x100000000009, 0x2, 0x8}}) 21:16:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0xff000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:51 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:51 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980001, 0x0, @value}) 21:16:51 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x2099800, 0x0, @value}) 21:16:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x7ff, 0x0, 0xfffffff9, 0xfffffffe, 0xfea, 0x3ff, 0x3, 0x6d, 0x8, 0x1ff, 0x1, 0x80000001, 0x80000001, 0x101, 0x0, 0x2, 0x0, 0x9, 0x9, 0xfffffe00, 0x6, 0x4, 0x10001, 0xfffffff7, 0x8, 0x3, 0xfffffff9, 0x6, 0x1, 0x1, 0x17da, 0x4]}) 21:16:51 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:51 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0xfffffdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x2f0f000, 0x0, @value}) 21:16:51 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:51 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x4000, 0x0, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xfffffffd}) 21:16:51 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:51 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x3000000, 0x0, @value}) 21:16:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:51 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x1, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x6, 0x0, @planes=0x0, 0x3}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x9, 0x86f4, 0x100, 0x6, 0xd140000, 0x7, 0x3, 0x3, 0x8, 0x5, 0x2, 0x9, 0x0, 0x1, 0x200, 0x9, 0x3, 0x9, 0x9ec, 0x8000, 0x2, 0x101, 0x6, 0x6, 0x81, 0x2, 0x3bbe, 0x2, 0x6c, 0x4, 0x3bd5, 0x3]}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x0, 0x7, 0x4, 0x10, 0x3, {0x0, 0xea60}, {0x5, 0xc, 0xa7, 0x4, 0x1, 0x7, "1ad0e0a0"}, 0x200, 0x0, @userptr=0x422, 0x1}) 21:16:51 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:51 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x3099800, 0x0, @value}) 21:16:51 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:51 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:51 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:51 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @local}, &(0x7f0000000280)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr=0x64010101, @empty, r0}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000780)={0xaf}, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0xa31e, 0x3872, @value=0x9}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x54) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xd1, 0x9, 0x1, 0x3, 0xe4, 0x1, 0x3}, &(0x7f0000000580)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e21, @broadcast}}, 0x8, 0x9, 0xd48, 0xfffffffe, 0x0, 0x3, 0x1}, &(0x7f00000005c0)=0x9c) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000300)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/keys\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)={0x4f, 0x3, 0x4, 0xe000, 0x2, {0x0, 0xea60}, {0x3, 0x3, 0x3f, 0x7f, 0x40, 0x1f, "c74349af"}, 0x5, 0x0, @fd=r5, 0x9}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000003c0), &(0x7f0000000480)=0x4) 21:16:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x4000000, 0x0, @value}) 21:16:51 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:51 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:51 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x400400, 0x0) syz_io_uring_setup(0x46a, &(0x7f0000000180)={0x0, 0x447a, 0x4, 0x2, 0x2cd, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x0, 0x2, @value=0x3}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x35b7807a22562da6, {0x7, 0xffffffff, 0x1ff, 0x7672}}) 21:16:51 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:51 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x5000000, 0x0, @value}) 21:16:51 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:52 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0xfc, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x75, 0x49c0) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x200f, 0x4, 0xc, 0x7, 0x1, 0x7}}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x1, 0x0, 0x0, {0x8, 0x3ff, 0x1, 0x20}}) 21:16:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x6000000, 0x0, @value}) 21:16:52 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x2099800, 0x0, @value}) 21:16:52 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0xffffffff, 0x3, 0x4, 0x40, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5271122a"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x7000000, 0x0, @value}) 21:16:52 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0xf0f000, 0x0, @value}) 21:16:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x600, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8000000, 0x0, @value}) 21:16:52 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x700, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x980900, 0x0, @value}) 21:16:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x14099800, 0x0, @value}) 21:16:52 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:52 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x15099800, 0x0, @value}) 21:16:52 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:52 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x40, 0x8, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0xfd, 0x7, 0x40, 0x1, "015d0d6d"}, 0x9, 0x1, @fd, 0x4, 0x0, r7}) 21:16:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xff000000, 0x0, @value}) 21:16:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 21:16:52 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x40, 0x8, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0xfd, 0x7, 0x40, 0x1, "015d0d6d"}, 0x9, 0x1, @fd, 0x4, 0x0, r7}) 21:16:53 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:53 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x40, 0x8, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0xfd, 0x7, 0x40, 0x1, "015d0d6d"}, 0x9, 0x1, @fd, 0x4, 0x0, r7}) 21:16:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x2, @value}) 21:16:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:53 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x3, @value}) 21:16:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, 0x0) 21:16:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x4, @value}) 21:16:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) 21:16:53 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x5, @value}) 21:16:53 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r1, 0x8, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r3, r4/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r1, 0x4, 0x0, r6}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x800, 0x9, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, @fd=r1}) 21:16:53 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x6, @value}) 21:16:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:53 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r0, 0x8, 0x0, r0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x100000, 0x34, {r2, r3/1000+10000}, {0x2, 0x1, 0x0, 0x8, 0x6, 0x0, "cb582df0"}, 0x3, 0x2, @fd=r0, 0x4, 0x0, r5}) 21:16:53 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x7, @value}) 21:16:53 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:53 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:53 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x80000000, 0x0, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x20, 0x3f, 0x0, "44112ff0"}, 0x9, 0x4, @fd=r0, 0x8, 0x0, r0}) 21:16:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x8, @value}) 21:16:54 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:54 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0845658, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x300, @value}) 21:16:54 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:54 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:54 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, 0x0) 21:16:54 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:54 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x500, @value}) 21:16:54 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, 0x0) 21:16:54 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:54 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x600, @value}) 21:16:54 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0845658, 0x0) 21:16:54 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:54 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x700, @value}) 21:16:54 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:54 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:54 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0xff00, @value}) 21:16:54 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:54 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:54 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x99800, @value}) 21:16:54 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:54 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:54 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:54 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:55 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, 0x0) 21:16:55 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0485619, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x980001, @value}) 21:16:55 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, 0x0) 21:16:55 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, 0x0) 21:16:55 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x980900, @value}) 21:16:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:55 executing program 0: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, 0x0) 21:16:55 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0585605, 0x0) 21:16:55 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x980901, @value}) 21:16:55 executing program 0: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:55 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0485619, 0x0) 21:16:55 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:55 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x980902, @value}) 21:16:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:55 executing program 0: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:55 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000180)={0x0, 0x40, 0x3010}) r3 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x1aa, 0x301000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)={0x1, 0x6, 0x4, 0x40, 0x2, {0x77359400}, {0x5, 0x0, 0x1, 0xc1, 0x4, 0x6, "ef586c63"}, 0x1000, 0x4, @offset, 0xfffffc00, 0x0, r4}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x8, 0x6, 0x4, 0x400, 0x10000, {}, {0x4, 0x8, 0x3f, 0xff, 0x20, 0x4, "fb1b00"}, 0x9a, 0x4, @fd=r2, 0x7, 0x0, r1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0xfff, 0x2, 0x6, 0x20, 0x1f1a63a, 0x7, 0xe}) 21:16:55 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x980903, @value}) 21:16:55 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:55 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 3: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 21:16:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x980914, @value}) 21:16:55 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:55 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:55 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:55 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x980915, @value}) 21:16:56 executing program 0: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:56 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 2: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:56 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0xf00001, @value}) 21:16:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:56 executing program 2: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:56 executing program 0: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:56 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 2: r0 = syz_open_dev$loop(0x0, 0x1f, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0xf0f000, @value}) 21:16:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:56 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 0: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:56 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0xf0f002, @value}) 21:16:56 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:16:56 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x1000000, @value}) 21:16:56 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x1009800, @value}) 21:16:56 executing program 2: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:56 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x100f000, @value}) 21:16:56 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 2: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:56 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 2: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:16:56 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x1099800, @value}) 21:16:56 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x2000000, @value}) 21:16:57 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:57 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, 0x0) 21:16:57 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x2099800, @value}) 21:16:57 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:57 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, 0x0) 21:16:57 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x2f0f000, @value}) 21:16:57 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564b, 0x0) 21:16:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x3000000, @value}) 21:16:57 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x3099800, @value}) 21:16:57 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, 0x0) 21:16:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x4000000, @value}) 21:16:57 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, 0x0) 21:16:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:57 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x5000000, @value}) 21:16:57 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:57 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, 0x0) 21:16:57 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x6000000, @value}) 21:16:58 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:58 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r1}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x0, 0x1, "ea61d2837e0cad7a0710d3aa7bd8e5088593dd91ff9b823c866a130d82764bee", 0x3, 0x9, 0x7fffffff, 0x8, 0x20}) 21:16:58 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x7000000, @value}) 21:16:58 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, 0x0) 21:16:58 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:58 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, 0x0) 21:16:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x8000000, @value}) 21:16:58 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:58 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040563e, 0x0) 21:16:58 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x14099800, @value}) 21:16:58 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:58 executing program 0: ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x8) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)={0xdead, 0x1, 0x4, 0x400, 0x2, {0x77359400}, {0x1, 0x0, 0x0, 0x7f, 0x60, 0x0, "6d273c02"}, 0x48000, 0x2, @fd=0xffffffffffffffff, 0xb3f0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)={0xffffffc1, 0x5, 0x4, 0x4000, 0xffffff70, {0x0, 0x2710}, {0x1, 0x2, 0x0, 0x84, 0x5a, 0xfe, "743f93ad"}, 0x1df, 0x3, @planes=&(0x7f0000000400)={0x7, 0x8, @fd=r1, 0x200}, 0x1000, 0x0, r2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0xff, 0x0, 0x0, "00000002"}, 0x0, 0x0, @planes=0x0}) socketpair(0x19, 0x2, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x8, {0x0, 0x27b41072, 0xce1, 0x8005}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000240)={{0x8, @rand_addr=0x64010101, 0x4e21, 0x1, 'sh\x00', 0x5, 0x507, 0x18}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 0x0, 0xee06, 0x9}}, 0x44) 21:16:58 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x15099800, @value}) 21:16:58 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, 0x0) 21:16:58 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:58 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0xff000000, @value}) 21:16:58 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, 0x0) 21:16:58 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:58 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x2}) 21:16:58 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563c, 0x0) 21:16:58 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x3}) 21:16:58 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "128b00"}, 0x0, 0x4, @fd=r0, 0x4}) 21:16:59 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) accept(r0, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000340)=0x80) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x10200, 0x0) syz_io_uring_setup(0x30e8, &(0x7f0000000040)={0x0, 0xd0a5, 0x2, 0x2, 0x2ee}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x4, 0x80000) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd=r3, 0x9, 0x5, 0x9, 0xc, 0x1, {0x3}}, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000280)=0x9473, 0x4) ioctl$VIDIOC_PREPARE_BUF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x4}) 21:16:59 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, 0x0) 21:16:59 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x5}) 21:16:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, 0x0) 21:16:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x6}) 21:16:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc038563b, 0x0) 21:16:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x7}) 21:16:59 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x8}) 21:16:59 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 4: getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3, 0x0, @planes=0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x2a2d1dbc}, 0x8) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @private=0xa010100}, {0x1, @multicast}, 0x40, {0x2, 0x3, @private=0xa010100}, 'bond0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x4c, 0x0, 0xe930, 0x100, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={r2, 0x3}, &(0x7f0000000280)=0x8) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2a0123, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x7, 0x9, 0x1}) 21:16:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x300}) 21:16:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:16:59 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:16:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x500}) 21:17:00 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, 0x0) 21:17:00 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x600}) 21:17:00 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, 0x0) 21:17:00 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305616, 0x0) 21:17:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, 0x0) 21:17:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x700}) 21:17:00 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0305615, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0xff00}) 21:17:00 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, 0x0) 21:17:00 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0305615, 0x0) 21:17:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x99800}) 21:17:00 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x80, 0x0, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x980001}) 21:17:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x980900}) 21:17:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:00 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:00 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, 0x0) 21:17:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x980901}) 21:17:01 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:01 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, 0x0) 21:17:01 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x980902}) 21:17:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:01 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0285628, 0x0) 21:17:01 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x980903}) 21:17:01 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:01 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x980914}) 21:17:01 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, 0x0) 21:17:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:01 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x980915}) 21:17:01 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, 0x0) 21:17:01 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:01 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0xf00001}) 21:17:01 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205648, 0x0) 21:17:01 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:01 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0xf0f000}) 21:17:01 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:01 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:01 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:02 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:02 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0xf0f002}) 21:17:02 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:02 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:02 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:02 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:02 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x1000000}) 21:17:02 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:02 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, 0x0) 21:17:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x1009800}) 21:17:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x100f000}) 21:17:02 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:02 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:03 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:03 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, 0x0) 21:17:03 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x1099800}) 21:17:03 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:03 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:03 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:03 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc0205647, 0x0) 21:17:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, 0x0) 21:17:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x2000000}) 21:17:03 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:03 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x1000000}) 21:17:03 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:03 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x2099800}) 21:17:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, 0x0) 21:17:03 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:03 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x1000000}) 21:17:04 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x2f0f000}) 21:17:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, 0x0) 21:17:04 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:04 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:04 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:04 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:04 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x3000000}) 21:17:04 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:04 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:04 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:04 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc039f61"}, 0x0, 0x0, @planes=0x0}) 21:17:04 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, 0x0) 21:17:05 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x3099800}) 21:17:05 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc059f61"}, 0x0, 0x0, @planes=0x0}) 21:17:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x4000000}) 21:17:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, 0x0) 21:17:05 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc0d9f61"}, 0x0, 0x0, @planes=0x0}) 21:17:05 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x5000000}) 21:17:05 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561b, 0x0) 21:17:05 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc109f61"}, 0x0, 0x0, @planes=0x0}) 21:17:05 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x6000000}) 21:17:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x7000000}) 21:17:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f5c"}, 0x0, 0x0, @planes=0x0}) 21:17:05 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0xc8f5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), 0x0) syz_io_uring_setup(0x56c9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:05 executing program 3: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x8000000}) 21:17:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:05 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x14099800}) 21:17:05 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x2, 0x0, @planes=0x0}) 21:17:05 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:05 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80805659, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x15099800}) 21:17:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3, 0x0, @planes=0x0}) 21:17:06 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0xff000000}) 21:17:06 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, 0x0) 21:17:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x4, 0x0, @planes=0x0}) 21:17:06 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x9980000000000}) 21:17:06 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 2: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0xf0f00000000000}) 21:17:06 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x5, 0x0, @planes=0x0}) 21:17:06 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, 0x0) 21:17:07 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x6, 0x0, @planes=0x0}) 21:17:07 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x100000000000000}) 21:17:07 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, 0x0) 21:17:07 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80805659, 0x0) 21:17:07 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8008563f, 0x0) 21:17:07 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x7, 0x0, @planes=0x0}) 21:17:07 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x100980000000000}) 21:17:07 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80405600, 0x0) 21:17:07 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x100f00000000000}) 21:17:07 executing program 3: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x8, 0x0, @planes=0x0}) 21:17:07 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40186366, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x109980000000000}) 21:17:07 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x300, 0x0, @planes=0x0}) 21:17:07 executing program 2: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x80085617, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:07 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x80085617, 0x0) 21:17:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x200000000000000}) 21:17:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x500, 0x0, @planes=0x0}) 21:17:08 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:08 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x209980000000000}) 21:17:08 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x600, 0x0, @planes=0x0}) 21:17:08 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x2f0f00000000000}) 21:17:08 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x700, 0x0, @planes=0x0}) 21:17:08 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x300000000000000}) 21:17:08 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:08 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xff00, 0x0, @planes=0x0}) 21:17:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:08 executing program 2: socket(0xf, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x8de, 0x0, [], {0x0, @bt={0x9, 0xf8, 0x1, 0x1, 0x1, 0x0, 0x3f, 0xa0d, 0xffff8000, 0x4, 0x10001, 0x2, 0x6, 0x1, 0x10, 0xa, {0x3, 0x401}, 0x40, 0x3f}}}) 21:17:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x309980000000000}) 21:17:08 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x1000000, 0x0, @planes=0x0}) 21:17:08 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x400000000000000}) 21:17:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:08 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x2000000, 0x0, @planes=0x0}) 21:17:08 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x500000000000000}) 21:17:08 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x9, 0x8, 0x1, 0x1, 0xf0, 0x7f, 0x800, 0x0, 0x3, 0x7, 0x9, 0x5, 0x0, 0x8, 0x0, 0x3, {0x6, 0x1000}, 0x7}}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000780)={0x0, @l2={0x1f, 0xdf, @fixed={[], 0x12}, 0x20, 0x1}, @phonet={0x23, 0x81, 0x4, 0x8}, @ipx={0x4, 0xff7f, 0x0, "832b60375428", 0x52}, 0x200, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)='veth0_virt_wifi\x00', 0x80000000, 0x6, 0x7fff}) r4 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x1, 0x800) ioctl$VIDIOC_PREPARE_BUF(r4, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x9, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @offset=0x8}) 21:17:08 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:09 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x600000000000000}) 21:17:09 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x8933, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x3000000, 0x0, @planes=0x0}) 21:17:09 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 3: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:09 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_mtu}) 21:17:09 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x700000000000000}) 21:17:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x4000000, 0x0, @planes=0x0}) 21:17:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:09 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:09 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x800000000000000}) 21:17:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x5000000, 0x0, @planes=0x0}) 21:17:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:09 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:09 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x1409980000000000}) 21:17:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x6000000, 0x0, @planes=0x0}) 21:17:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0x1509980000000000}) 21:17:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:09 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, 0x0) 21:17:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x7000000, 0x0, @planes=0x0}) 21:17:09 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, 0x0) 21:17:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value=0xff00000000000000}) 21:17:09 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, 0x0) 21:17:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x8000000, 0x0, @planes=0x0}) 21:17:09 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, 0x0) 21:17:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:09 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:09 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:09 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x40085618, 0x0) 21:17:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x4020565b, 0x0) 21:17:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xfdfdffff, 0x0, @planes=0x0}) 21:17:10 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x2}) 21:17:10 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, {0x2f4, 0xffffffc0, 0x9, 0x1}}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x8, 0x100, 0x6, {0xa1, 0x80000000, 0xd16, 0x9}}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0xfffffffd, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video37\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x2, 0x401, "955e6d", 0x1, 0x7}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) syz_io_uring_setup(0x3762, &(0x7f0000000000), &(0x7f0000fee000/0x10000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000240)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x28000, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xff000000, 0x0, @planes=0x0}) 21:17:10 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x3}) 21:17:10 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, {0x2f4, 0xffffffc0, 0x9, 0x1}}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x8, 0x100, 0x6, {0xa1, 0x80000000, 0xd16, 0x9}}) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0xfffffffd, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0xfffffdfd, 0x0, @planes=0x0}) 21:17:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x4}) 21:17:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 21:17:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0189436, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x5}) 21:17:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) [ 1974.036738][T21022] Sensor A: ================= START STATUS ================= [ 1974.045998][T21022] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1974.076109][T21022] v4l2-ctrls: Sensor A: Show Information: All 21:17:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000080)={@multicast2, @empty}, 0xc) [ 1974.110505][T21022] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1974.130793][T21022] v4l2-ctrls: Sensor A: Horizontal Flip: false 21:17:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x6, "2a552da76b2563636fb5c92dfd88d5273013ec6106e7942a2ef3791acf587761", 0x1, 0x1, 0x2, 0x0, 0x3b9ddc41d161d571, 0x4}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc010d61"}, 0x0, 0x0, @planes=0x0}) [ 1974.163357][T21022] v4l2-ctrls: Sensor A: Brightness: 128 [ 1974.181011][T21022] v4l2-ctrls: Sensor A: Contrast: 128 21:17:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2, @planes=0x0}) 21:17:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) [ 1974.205101][T21022] v4l2-ctrls: Sensor A: Hue: 0 21:17:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x6, "2a552da76b2563636fb5c92dfd88d5273013ec6106e7942a2ef3791acf587761", 0x1, 0x1, 0x2, 0x0, 0x3b9ddc41d161d571, 0x4}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc010d61"}, 0x0, 0x0, @planes=0x0}) 21:17:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x6}) 21:17:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) [ 1974.239385][T21022] v4l2-ctrls: Sensor A: Saturation: 128 [ 1974.267753][T21022] Sensor A: ================== END STATUS ================== 21:17:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x3, @planes=0x0}) 21:17:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x7}) 21:17:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x4, @planes=0x0}) 21:17:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x6, "2a552da76b2563636fb5c92dfd88d5273013ec6106e7942a2ef3791acf587761", 0x1, 0x1, 0x2, 0x0, 0x3b9ddc41d161d571, 0x4}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc010d61"}, 0x0, 0x0, @planes=0x0}) 21:17:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 21:17:10 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x8}) [ 1974.483341][T21052] Sensor A: ================= START STATUS ================= [ 1974.516268][T21052] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:17:10 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x5, @planes=0x0}) 21:17:11 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x6, "2a552da76b2563636fb5c92dfd88d5273013ec6106e7942a2ef3791acf587761", 0x1, 0x1, 0x2, 0x0, 0x3b9ddc41d161d571, 0x4}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) [ 1974.562333][T21052] v4l2-ctrls: Sensor A: Show Information: All [ 1974.597608][T21052] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1974.627674][T21052] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1974.635036][T21052] v4l2-ctrls: Sensor A: Brightness: 128 21:17:11 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) [ 1974.678924][T21052] v4l2-ctrls: Sensor A: Contrast: 128 [ 1974.702493][T21052] v4l2-ctrls: Sensor A: Hue: 0 [ 1974.723354][T21052] v4l2-ctrls: Sensor A: Saturation: 128 [ 1974.745158][T21052] Sensor A: ================== END STATUS ================== 21:17:11 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x6, @planes=0x0}) 21:17:11 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x6, "2a552da76b2563636fb5c92dfd88d5273013ec6106e7942a2ef3791acf587761", 0x1, 0x1, 0x2, 0x0, 0x3b9ddc41d161d571, 0x4}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x5}) 21:17:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x300}) 21:17:11 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x500}) 21:17:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x8}) 21:17:11 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x6, "2a552da76b2563636fb5c92dfd88d5273013ec6106e7942a2ef3791acf587761", 0x1, 0x1, 0x2, 0x0, 0x3b9ddc41d161d571, 0x4}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x7, @planes=0x0}) [ 1974.935392][T21085] Sensor A: ================= START STATUS ================= [ 1974.955587][T21085] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:17:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) [ 1974.982746][T21085] v4l2-ctrls: Sensor A: Show Information: All [ 1975.004562][T21085] v4l2-ctrls: Sensor A: Vertical Flip: false 21:17:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) [ 1975.027651][T21085] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1975.040386][T21085] v4l2-ctrls: Sensor A: Brightness: 128 [ 1975.075241][T21085] v4l2-ctrls: Sensor A: Contrast: 128 [ 1975.092955][T21085] v4l2-ctrls: Sensor A: Hue: 0 [ 1975.103798][T21085] v4l2-ctrls: Sensor A: Saturation: 128 21:17:11 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:11 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x6, "2a552da76b2563636fb5c92dfd88d5273013ec6106e7942a2ef3791acf587761", 0x1, 0x1, 0x2, 0x0, 0x3b9ddc41d161d571, 0x4}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x8, @planes=0x0}) 21:17:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 21:17:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x600}) 21:17:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x8}) [ 1975.124434][T21085] Sensor A: ================== END STATUS ================== 21:17:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:11 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:11 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x700}) 21:17:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x500}) 21:17:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x300, @planes=0x0}) 21:17:11 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:11 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0xe00, [0x0, 0x20000480, 0x20000e9c, 0x20000fba], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x88be, 'vlan0\x00', 'ip6gre0\x00', 'ip6erspan0\x00', 'netdevsim0\x00', @dev={[], 0x2e}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0xa, 0x9200, 'veth0_to_bridge\x00', 'batadv0\x00', 'erspan0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x8a6, 0x8d6, 0x94e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x2}, {0x5}, {0x1ff}, {0x900000, 0x2}, {0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x7}, {0x0, 0x1}, {0x7fff, 0x3}], [{0x1, 0x7fffffff}, {0x401, 0x1}, {0xffff0001, 0x92a}, {0x34}, {0x20000000, 0x7fffffff}, {0x7c52, 0x1000}, {0x4, 0x7}, {0x7, 0x2}, {0xfffffff8, 0x6}, {0x7ff, 0x1ff}, {0x3ff, 0x3}], 0xb, 0x4}, {[{0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x40, 0x1}, {0x3, 0x2}, {0x8, 0x2}, {0x0, 0x1}, {0x80}, {0x2}, {0x0, 0x1}, {0x1, 0x1}], [{0x8, 0x5}, {0x2, 0x6}, {0x3}, {0x0, 0x448}, {0x0, 0x8}, {0xda65, 0x2cd6}, {0x7, 0xffff}, {0x800, 0x3}, {0xffff8000, 0x7}, {0x2}, {0x1000, 0x4}], 0xb, 0x2}, {[{0x400, 0x2}, {0x9, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xf4a5, 0x1}, {0x3f, 0x3}, {0x2e3}, {0xffff, 0x1}], [{0x9, 0x7}, {0xfff, 0x7}, {0xc5e8, 0x80000001}, {0x80000001, 0x7ff}, {0x3, 0x4}, {0xfffffffc, 0x20}, {0x1}, {0x7ff, 0x8}, {0xfff, 0x1000}, {0x5, 0x1}, {0xfffffffa, 0xfffffffd}], 0x8, 0x9}, {[{0xa5, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x200, 0x1}, {0x4}, {0xffff, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}], [{0x4, 0x4}, {0x3, 0x6}, {0x6d6, 0x2}, {0xd319}, {0xff, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0xffff3c33, 0xcb4}, {0xfffffe01, 0x1000}, {0x5f34ffeb, 0x7}, {0x661b, 0x7}], 0x4, 0x6}, {[{0x3, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x6}, {0x8001, 0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xfd5f, 0x3}], [{0x2, 0x7}, {0xfffffffe, 0x1}, {0x8, 0x5d}, {0x2}, {0x9, 0x8}, {0x80000001, 0xd8}, {0xa0, 0x6}, {0x2000, 0x10001}, {0x7f, 0x4}, {0x10001, 0x5}, {0x5, 0x7}], 0x7, 0x2}, {[{0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x3, 0x2}, {0x7f, 0x1}, {0x5, 0x3}, {0x800}, {0xca}, {0x10000, 0x2}, {0x6, 0x3}, {0xca22, 0x3}], [{0x5, 0x800}, {0x2, 0x8}, {0x4a, 0x7}, {0x6, 0x8001}, {0x9, 0xa0}, {0x29, 0x1}, {0x5, 0x7a81f54e}, {0xf71, 0x221fecf6}, {0x8}, {0x400, 0x5}, {0x9, 0x10000}], 0x9, 0x1}, {[{0x6, 0x2}, {0x5, 0x3}, {0x8, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x5f, 0x2}, {0x101, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x46a5, 0x1}, {0xb0a6, 0x8}, {0x1, 0x6}, {0xff, 0xcfe}, {0x1, 0x8}, {0x4e, 0x401}, {0x0, 0x800}, {0xbe, 0x10000}, {0x1, 0x8}, {0x8, 0xffffff81}, {0x9, 0x6}], 0xa, 0x2}, {[{0xc36, 0x3}, {0x3000, 0x3}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x9}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x0, 0x4}], [{0x4, 0x6}, {0x3ff, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x884, 0x5}, {0x68, 0x8001}, {0x7, 0x17e4}, {0x2, 0x5}, {0xa8f, 0xfff}, {0x8, 0x8}, {0x7, 0x3}], 0x1, 0x2}, {[{0x4, 0x3}, {0x3d, 0xebce689d4f918a47}, {0x20, 0x3}, {0x5}, {0x9}, {0xbf, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x800, 0x2}, {0x3, 0x1}], [{0x81, 0x5}, {0x5, 0x80000000}, {0x5, 0xd46c}, {0x800, 0x5}, {0xfff, 0x1000}, {0x80000000, 0xa41}, {0x7, 0xfffffffc}, {0x81, 0x9ac}, {0x3, 0x3}, {0x0, 0x53c4}, {0x4, 0x100}], 0x1, 0x2}, {[{0x7fffffff}, {0x4, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x1}, {0xfffffff7, 0x3}, {0x2, 0x2}, {0x3ff, 0x3}, {0x138e0e0, 0x2}, {0x0, 0x1}, {0x10000, 0x1}], [{0x586, 0x3}, {0x8001, 0x1000}, {0xff, 0xff}, {0x80000000}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x200}, {0x8, 0x3c}, {0x8, 0x8}, {0x441cee39, 0x9}, {0x401, 0x7bb8}], 0xb, 0xb}, {[{0x1f47, 0x1}, {0x80}, {0x3, 0x1}, {0x3, 0x3}, {0xa70, 0x1}, {0x2}, {0x1f, 0x1}, {0x6}, {0xa884, 0x1}, {0x4, 0x2}, {0x8, 0x3}], [{0x0, 0x9}, {0x401, 0x5}, {0x8, 0x5}, {0xfffffff8}, {0x4, 0x7fff}, {0x3, 0x6}, {0x1, 0x400}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x1000}, {0x5, 0x9}], 0x9, 0x1}], 0x3, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff, 0xff000000], 0x4e22, 0x3a, 0x2, 0x4e23, 0x1, 0x10}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3ff, 0x5, 0x2, 0x0, 0x0, "1560dfeaa31963867198790a356f6c9ba290f31f651fd86cdeb20d3dab9a48eda7b47be10341bb5e26a25917eaca40a43ee5adb50cc9d48e2f85a245c8924891"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x78, 0x1b, 'veth1_vlan\x00', 'veth1\x00', 'ip6gre0\x00', '\x00', @local, [0xff, 0x0, 0x0, 0xad98d51299d42bea, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x42, 0xf9, 'vlan1\x00', 'macvlan1\x00', 'veth0_vlan\x00', 'team0\x00', @dev={[], 0xb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x2d}, [0xff, 0x0, 0xff, 0xff], 0xb6, 0x21e, 0x296, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0x0, 0x9, 0x2, 0x40e7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:init_var_run_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x1, 0x4, 0x1, 0x0, "88422e09d2e591001dac8c38748cbdad6c4955ab472b6326f5293b4713409ef41c817ad578b81b83dd33c67cf05782d972ca0bb7e75dfd0c17f9f294de8e1e68"}}}}]}]}, 0xe78) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:11 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 21:17:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x500, @planes=0x0}) 21:17:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0xff00}) 21:17:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x5, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:11 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:11 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) 21:17:12 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x600, @planes=0x0}) 21:17:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x0, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0xfffffffe, 0x9, 0x0, 0x1, 0x60}) 21:17:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x99800}) 21:17:12 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:12 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) 21:17:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:12 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x700, @planes=0x0}) 21:17:12 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x0, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0x0, 0x9, 0x0, 0x1, 0x60}) 21:17:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x980001}) 21:17:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:12 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xff00, @planes=0x0}) 21:17:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x980900}) 21:17:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) 21:17:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x0, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0x0, 0x0, 0x0, 0x1, 0x60}) 21:17:12 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:12 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x1000000, @planes=0x0}) 21:17:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) 21:17:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x0, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa", 0x0, 0x0, 0x0, 0x0, 0x60}) 21:17:12 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x980901}) 21:17:12 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:12 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x2000000, @planes=0x0}) 21:17:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) 21:17:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x0, "f9cbf3dc59d7035f8d21c9c905352b11b10dfbc0abfb6ec0abbcf180f00706aa"}) 21:17:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x980902}) 21:17:12 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x3000000, @planes=0x0}) 21:17:12 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) 21:17:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xff00, @planes=0x0}) 21:17:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x980903}) 21:17:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) [ 1976.478085][T21214] Sensor A: ================= START STATUS ================= [ 1976.517439][T21214] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:17:12 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:12 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r4, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x20, 0x1, {r0, r1/1000+60000}, {0x1, 0x8, 0xff, 0x68, 0x6c, 0x97, "b30e11c3"}, 0x40, 0x3, @userptr=0x1f, 0x8, 0x0, r2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @multicast2}, &(0x7f0000000640)=0xc) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in=@remote, 0x4e20, 0x80, 0x4e22, 0x4, 0xa, 0x80, 0x60, 0x73, r6, 0xffffffffffffffff}, {0x3e000, 0xffffffffffffff9e, 0x8, 0x81, 0x7fff, 0x9, 0x6, 0x191}, {0x800, 0x7f, 0x800, 0xfffffffff79b50fa}, 0x7fff, 0x6e6bb1, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3500, 0x0, 0x0, 0x40, 0x8000, 0x7fff, 0x4}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e24, 0x1, 0x4e23, 0xffe9, 0xa, 0x0, 0x0, 0x5c, r6, 0xee00}, {0xffffffffffffffff, 0x9, 0x6, 0xfbc, 0x401, 0x3, 0x6, 0x3}, {0xffffffff, 0x7, 0x1, 0x88}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x1, 0x2}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x0, 0x1, 0x3, 0x7f, 0x71ca, 0x40, 0x9}}, 0xe8) 21:17:12 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x4000000, @planes=0x0}) [ 1976.541358][T21214] v4l2-ctrls: Sensor A: Show Information: All [ 1976.565648][T21214] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1976.601608][T21214] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1976.624458][T21214] v4l2-ctrls: Sensor A: Brightness: 128 21:17:13 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r4, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x20, 0x1, {r0, r1/1000+60000}, {0x1, 0x8, 0xff, 0x68, 0x6c, 0x97, "b30e11c3"}, 0x40, 0x3, @userptr=0x1f, 0x8, 0x0, r2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @multicast2}, &(0x7f0000000640)=0xc) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in=@remote, 0x4e20, 0x80, 0x4e22, 0x4, 0xa, 0x80, 0x60, 0x73, r6, 0xffffffffffffffff}, {0x3e000, 0xffffffffffffff9e, 0x8, 0x81, 0x7fff, 0x9, 0x6, 0x191}, {0x800, 0x7f, 0x800, 0xfffffffff79b50fa}, 0x7fff, 0x6e6bb1, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3500, 0x0, 0x0, 0x40, 0x8000, 0x7fff, 0x4}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e24, 0x1, 0x4e23, 0xffe9, 0xa, 0x0, 0x0, 0x5c, r6, 0xee00}, {0xffffffffffffffff, 0x9, 0x6, 0xfbc, 0x401, 0x3, 0x6, 0x3}, {0xffffffff, 0x7, 0x1, 0x88}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x1, 0x2}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x0, 0x1, 0x3, 0x7f, 0x71ca, 0x40, 0x9}}, 0xe8) 21:17:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) [ 1976.647297][T21214] v4l2-ctrls: Sensor A: Contrast: 128 21:17:13 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}, @in={0x2, 0x4e22, @empty}], 0x3c) 21:17:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x5000000, @planes=0x0}) [ 1976.672589][T21214] v4l2-ctrls: Sensor A: Hue: 0 [ 1976.714162][T21214] v4l2-ctrls: Sensor A: Saturation: 128 21:17:13 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r4, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x20, 0x1, {r0, r1/1000+60000}, {0x1, 0x8, 0xff, 0x68, 0x6c, 0x97, "b30e11c3"}, 0x40, 0x3, @userptr=0x1f, 0x8, 0x0, r2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @multicast2}, &(0x7f0000000640)=0xc) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in=@remote, 0x4e20, 0x80, 0x4e22, 0x4, 0xa, 0x80, 0x60, 0x73, r6, 0xffffffffffffffff}, {0x3e000, 0xffffffffffffff9e, 0x8, 0x81, 0x7fff, 0x9, 0x6, 0x191}, {0x800, 0x7f, 0x800, 0xfffffffff79b50fa}, 0x7fff, 0x6e6bb1, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3500, 0x0, 0x0, 0x40, 0x8000, 0x7fff, 0x4}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e24, 0x1, 0x4e23, 0xffe9, 0xa, 0x0, 0x0, 0x5c, r6, 0xee00}, {0xffffffffffffffff, 0x9, 0x6, 0xfbc, 0x401, 0x3, 0x6, 0x3}, {0xffffffff, 0x7, 0x1, 0x88}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x1, 0x2}, {{@in6=@private1, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x0, 0x1, 0x3, 0x7f, 0x71ca, 0x40, 0x9}}, 0xe8) [ 1976.744631][T21214] Sensor A: ================== END STATUS ================== 21:17:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x980914}) 21:17:13 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, "eafc9a61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8, 0x0, r1}) 21:17:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x6000000, @planes=0x0}) 21:17:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 21:17:13 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r4, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x20, 0x1, {r0, r1/1000+60000}, {0x1, 0x8, 0xff, 0x68, 0x6c, 0x97, "b30e11c3"}, 0x40, 0x3, @userptr=0x1f, 0x8, 0x0, r2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @multicast2}, &(0x7f0000000640)=0xc) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in=@remote, 0x4e20, 0x80, 0x4e22, 0x4, 0xa, 0x80, 0x60, 0x73, r6, 0xffffffffffffffff}, {0x3e000, 0xffffffffffffff9e, 0x8, 0x81, 0x7fff, 0x9, 0x6, 0x191}, {0x800, 0x7f, 0x800, 0xfffffffff79b50fa}, 0x7fff, 0x6e6bb1, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3500, 0x0, 0x0, 0x40, 0x8000, 0x7fff, 0x4}}, 0xe8) 21:17:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 21:17:13 executing program 3: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x7000000, @planes=0x0}) 21:17:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x980915}) [ 1976.965804][T21248] Sensor A: ================= START STATUS ================= 21:17:13 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r4, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x20, 0x1, {r0, r1/1000+60000}, {0x1, 0x8, 0xff, 0x68, 0x6c, 0x97, "b30e11c3"}, 0x40, 0x3, @userptr=0x1f, 0x8, 0x0, r2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @multicast2}, &(0x7f0000000640)=0xc) 21:17:13 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) [ 1977.024921][T21248] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1977.068034][T21248] v4l2-ctrls: Sensor A: Show Information: All [ 1977.095960][T21248] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1977.119136][T21248] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1977.133426][T21248] v4l2-ctrls: Sensor A: Brightness: 128 [ 1977.145066][T21248] v4l2-ctrls: Sensor A: Contrast: 128 [ 1977.157058][T21248] v4l2-ctrls: Sensor A: Hue: 0 21:17:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0xf00001}) 21:17:13 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r4, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x20, 0x1, {r0, r1/1000+60000}, {0x1, 0x8, 0xff, 0x68, 0x6c, 0x97, "b30e11c3"}, 0x40, 0x3, @userptr=0x1f, 0x8, 0x0, r2}) socket$inet_udplite(0x2, 0x2, 0x88) 21:17:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 21:17:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x8000000, @planes=0x0}) 21:17:13 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) [ 1977.166237][T21248] v4l2-ctrls: Sensor A: Saturation: 128 [ 1977.176214][T21248] Sensor A: ================== END STATUS ================== 21:17:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:13 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x622e}], 0x2c) 21:17:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0xf0f000}) 21:17:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xfdfdffff, @planes=0x0}) 21:17:13 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r4, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x20, 0x1, {r0, r1/1000+60000}, {0x1, 0x8, 0xff, 0x68, 0x6c, 0x97, "b30e11c3"}, 0x40, 0x3, @userptr=0x1f, 0x8, 0x0, r2}) [ 1977.313749][T21272] Sensor A: ================= START STATUS ================= [ 1977.340469][T21272] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:17:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}], 0x10) [ 1977.390764][T21272] v4l2-ctrls: Sensor A: Show Information: All [ 1977.419177][T21272] v4l2-ctrls: Sensor A: Vertical Flip: false 21:17:13 executing program 3: r0 = syz_open_dev$video4linux(0x0, 0xcc5b, 0x800) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:13 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x4e23, 0x5, 0x4e24, 0x1, 0x8, 0x0, 0x0, 0x84, r2, 0xffffffffffffffff}, {0x59c, 0x7, 0x20, 0x4, 0x6, 0x0, 0x1, 0x200}, {0x61e00, 0x5, 0x0, 0x1}, 0x10001, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x4, 0x3, 0x2, 0x40, 0x7, 0x7ff}}, 0xe8) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xff000000, @planes=0x0}) [ 1977.436998][T21272] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1977.456246][T21272] v4l2-ctrls: Sensor A: Brightness: 128 [ 1977.466393][T21272] v4l2-ctrls: Sensor A: Contrast: 128 [ 1977.478452][T21272] v4l2-ctrls: Sensor A: Hue: 0 21:17:13 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x800) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200), 0x0) [ 1977.541732][T21272] v4l2-ctrls: Sensor A: Saturation: 128 [ 1977.585006][T21272] Sensor A: ================== END STATUS ================== 21:17:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0xf0f002}) 21:17:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0xfffffdfd, @planes=0x0}) 21:17:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:14 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200), 0x0) 21:17:14 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200), 0x0) 21:17:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x1000000}) 21:17:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:14 executing program 3: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:14 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) socket$inet_smc(0x2b, 0x1, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) [ 1977.796229][T21306] Sensor A: ================= START STATUS ================= [ 1977.805073][T21306] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:17:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x2}) [ 1977.853130][T21306] v4l2-ctrls: Sensor A: Show Information: All [ 1977.877483][T21306] v4l2-ctrls: Sensor A: Vertical Flip: false 21:17:14 executing program 3: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x0, @multicast1}], 0x10) [ 1977.910835][T21306] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1977.956521][T21306] v4l2-ctrls: Sensor A: Brightness: 128 [ 1977.983358][T21306] v4l2-ctrls: Sensor A: Contrast: 128 [ 1977.997338][T21306] v4l2-ctrls: Sensor A: Hue: 0 [ 1978.012073][T21306] v4l2-ctrls: Sensor A: Saturation: 128 [ 1978.027075][T21306] Sensor A: ================== END STATUS ================== 21:17:14 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x3}) 21:17:14 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="7036335527f33aea6cd9be0473ea4dcb10c38cb9edab16dd849d6f23d0640f77f9e01e25fc3ff46735b1", 0x2a) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:14 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x980915}) 21:17:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x1009800}) 21:17:14 executing program 3: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8000, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 21:17:14 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x7000000, @planes=0x0}) 21:17:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x4}) 21:17:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) [ 1978.181324][T21335] Sensor A: ================= START STATUS ================= 21:17:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x100f000}) [ 1978.240308][T21335] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1978.266440][T21335] v4l2-ctrls: Sensor A: Show Information: All [ 1978.300126][T21335] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1978.331606][T21335] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1978.346787][T21335] v4l2-ctrls: Sensor A: Brightness: 128 [ 1978.354773][T21335] v4l2-ctrls: Sensor A: Contrast: 128 [ 1978.366350][T21335] v4l2-ctrls: Sensor A: Hue: 0 [ 1978.373692][T21335] v4l2-ctrls: Sensor A: Saturation: 128 [ 1978.392054][T21335] Sensor A: ================== END STATUS ================== 21:17:14 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:14 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:14 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x5}) 21:17:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 21:17:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x1099800}) 21:17:14 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c}) 21:17:14 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) [ 1978.482643][T21355] Sensor A: ================= START STATUS ================= [ 1978.510850][T21355] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:17:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x6}) 21:17:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x2000000}) 21:17:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) [ 1978.545790][T21355] v4l2-ctrls: Sensor A: Show Information: All [ 1978.566143][T21355] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1978.581748][T21355] v4l2-ctrls: Sensor A: Horizontal Flip: false 21:17:15 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c}) [ 1978.613083][T21355] v4l2-ctrls: Sensor A: Brightness: 128 [ 1978.645268][T21355] v4l2-ctrls: Sensor A: Contrast: 128 [ 1978.674349][T21355] v4l2-ctrls: Sensor A: Hue: 0 [ 1978.685803][T21355] v4l2-ctrls: Sensor A: Saturation: 128 [ 1978.704935][T21355] Sensor A: ================== END STATUS ================== 21:17:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:15 executing program 0: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x7}) 21:17:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:15 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000040)) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c}) 21:17:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x2099800}) 21:17:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x8}) 21:17:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:15 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) [ 1978.851311][T21381] Sensor A: ================= START STATUS ================= 21:17:15 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x2f0f000}) [ 1978.899862][T21381] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:17:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x300}) [ 1978.942060][T21381] v4l2-ctrls: Sensor A: Show Information: All [ 1978.959756][T21381] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1978.972904][T21381] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1978.990235][T21381] v4l2-ctrls: Sensor A: Brightness: 128 [ 1979.023162][T21381] v4l2-ctrls: Sensor A: Contrast: 128 [ 1979.037505][T21381] v4l2-ctrls: Sensor A: Hue: 0 [ 1979.045753][T21381] v4l2-ctrls: Sensor A: Saturation: 128 [ 1979.063355][T21381] Sensor A: ================== END STATUS ================== 21:17:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:15 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x40, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x3000000}) 21:17:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x500}) 21:17:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) [ 1979.191865][T21406] Sensor A: ================= START STATUS ================= [ 1979.225100][T21406] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 21:17:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x600}) 21:17:15 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x3099800}) 21:17:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x1, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) [ 1979.246311][T21406] v4l2-ctrls: Sensor A: Show Information: All [ 1979.282245][T21406] v4l2-ctrls: Sensor A: Vertical Flip: false 21:17:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) [ 1979.303866][T21406] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1979.325012][T21406] v4l2-ctrls: Sensor A: Brightness: 128 [ 1979.339092][T21406] v4l2-ctrls: Sensor A: Contrast: 128 [ 1979.368198][T21406] v4l2-ctrls: Sensor A: Hue: 0 [ 1979.382183][T21406] v4l2-ctrls: Sensor A: Saturation: 128 [ 1979.401906][T21406] Sensor A: ================== END STATUS ================== 21:17:15 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x700}) 21:17:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:15 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x4000000}) 21:17:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x8, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:15 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xff00}) 21:17:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x5000000}) 21:17:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:15 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:16 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x6000000}) 21:17:16 executing program 4: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x80, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x1000000}) 21:17:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:16 executing program 0: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:16 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x7000000}) 21:17:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x2000000}) 21:17:16 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x7858, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:16 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x3000000}) 21:17:16 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:16 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0x5646, 0x0) 21:17:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x8000000}) 21:17:16 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, 0x0) 21:17:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x4000000}) 21:17:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x401, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:16 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, 0x0) 21:17:16 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x14099800}) 21:17:16 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x4, @userptr=0xfffffffffffff000, 0x8}) 21:17:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x5000000}) 21:17:16 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, 0x0) 21:17:16 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:16 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0x15099800}) 21:17:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x6000000}) 21:17:16 executing program 4: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0x5646, 0x0) 21:17:16 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x2, 0x11c, 0x0, r0}) 21:17:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0xffffffff, 0x0, 0x4, 0x0, 0x40, {0x0, 0xea60}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "000400"}, 0x0, 0x0, @planes=0x0, 0x9}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2c0000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}], 0x3c) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x5, {0x100000, 0x6, 0x6}}) 21:17:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value, 0xff000000}) 21:17:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr, 0x8}) 21:17:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x7000000}) 21:17:17 executing program 0: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x11c, 0x0, r0}) 21:17:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x7f, 0x517400) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000300)={0x5, 0x2, 0x3, {0x40, 0x0, 0x80, 0x9a4d}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0xfffffffa, 0x0, [], {0x0, @reserved}}) r3 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r5 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000000380)={0x0, 0x0, {0x6, 0xef, 0x3013, 0x6, 0xb, 0x3, 0x2, 0x1}}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000280)={0x3, 0x1, 0x4, {0x1, 0x80000001, 0xffffffff, 0x4}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000240)={0x3, 0xfffffff9, @value=0x6}) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000480)={0x18, 0x0, 0x0, 0xd6e}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000180)={0x3, 0x2, 0x4, 0x4000, 0x0, {0x0, 0xea60}, {0x1, 0x2, 0x4, 0x4, 0x9, 0x1, "42d23e96"}, 0x2, 0x2, @userptr=0x52, 0x5, 0x0, r2}) 21:17:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr, 0x8}) 21:17:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x405040) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x4, 0x2, "867698bb22f916caae4ec38ea226706fc9a8fc8dcfffbf61b1508d680313f8ba", 0x3, 0x9, 0xfffffffe, 0x5, 0x409}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x8000000}) 21:17:17 executing program 0: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x11c, 0x0, r0}) 21:17:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr, 0x8}) 21:17:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x5, 0x1, 0x3, 0xc5, 0x8, 0x1ff, 0x4, 0x8, 0x3, 0xf5b, 0xffff, 0x4, 0x5, 0x5, 0x8, {0x101, 0x7}, 0x1, 0x6}}) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x0, 0x6, {0x3, 0x8, 0x9, 0xe5}}) 21:17:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xfdfdffff}) 21:17:17 executing program 0: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000}) 21:17:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x11c, 0x0, r0}) 21:17:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x7, 0x4, 0x2, 0x400, 0x1, 0x100}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x5, 0x1, 0x3, 0xc5, 0x8, 0x1ff, 0x4, 0x8, 0x3, 0xf5b, 0xffff, 0x4, 0x5, 0x5, 0x8, {0x101, 0x7}, 0x1, 0x6}}) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x0, 0x6, {0x3, 0x8, 0x9, 0xe5}}) 21:17:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xff000000}) 21:17:17 executing program 0: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000}) 21:17:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x11c, 0x0, r0}) 21:17:17 executing program 5: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) 21:17:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x5, 0x1, 0x3, 0xc5, 0x8, 0x1ff, 0x4, 0x8, 0x3, 0xf5b, 0xffff, 0x4, 0x5, 0x5, 0x8, {0x101, 0x7}, 0x1, 0x6}}) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x0, 0x6, {0x3, 0x8, 0x9, 0xe5}}) 21:17:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000}) 21:17:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0xfffffdfd}) 21:17:17 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 21:17:17 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x2000011f, 0x4500) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000340)={0x0, 0x5b84, 0x100e}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x8, @name="95fc5d0b45af41661678aa390eed1d2dcbdec738d4045a4945680fc04ca1dde4"}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x5, 0x46, &(0x7f00000002c0)=""/70) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f0000000180)="d024bd385a5ae0fe519777594aaf69e726b42d1269a8ab1b2f00833326b9c7ae14022447fa67b5052889470b5e7546841857f597ad39f52bef78e59978ae4f996963da03cb527d3016926e0bfa7c456d809a91f0fd2dc38cd5f3506a38bc3dec4452789921617aa4bc96ef71ae8d544c767e35471832c76d607e7b2d7475bab2997853e7f2cb3c05f3c22b23971804f0a6ff049f692dbb279de93daa0743b71f470a3bed7a4b66ffb0629a9aaca791b37dd5bb272d2a57df1d4a98ad5491d82f106334f7fc1795d5eaf9833ae59c5bfb4e1ecd87e54e8e024de2bbbe72ff3941047fdb699d0224b0a97c15d7ceaa3b4c6c225744d3ae93f6", 0xf8, 0x6, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f00000003c0)="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", 0x1c1, 0xfffffffffffffffd, 0x0, 0x1}]) 21:17:17 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x5, 0x1, 0x3, 0xc5, 0x8, 0x1ff, 0x4, 0x8, 0x3, 0xf5b, 0xffff, 0x4, 0x5, 0x5, 0x8, {0x101, 0x7}, 0x1, 0x6}}) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 21:17:17 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:17 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:17 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20}) [ 1981.441493][T21593] FAULT_INJECTION: forcing a failure. [ 1981.441493][T21593] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.474002][T21593] CPU: 1 PID: 21593 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1981.482826][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.492980][T21593] Call Trace: [ 1981.496262][T21593] dump_stack+0x107/0x163 [ 1981.500606][T21593] should_fail.cold+0x5/0xa [ 1981.505111][T21593] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1981.510839][T21593] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1981.516562][T21593] should_failslab+0x5/0x10 [ 1981.521072][T21593] __kmalloc+0x72/0x3e0 [ 1981.525239][T21593] tomoyo_realpath_from_path+0xc3/0x620 [ 1981.531059][T21593] ? tomoyo_profile+0x42/0x50 [ 1981.535910][T21593] tomoyo_path_number_perm+0x1d5/0x590 21:17:17 executing program 0: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:17 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x5, 0x1, 0x3, 0xc5, 0x8, 0x1ff, 0x4, 0x8, 0x3, 0xf5b, 0xffff, 0x4, 0x5, 0x5, 0x8, {0x101, 0x7}, 0x1, 0x6}}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 21:17:17 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x5, 0x1, 0x3, 0xc5, 0x8, 0x1ff, 0x4, 0x8, 0x3, 0xf5b, 0xffff, 0x4, 0x5, 0x5, 0x8, {0x101, 0x7}, 0x1, 0x6}}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) [ 1981.541379][T21593] ? tomoyo_path_number_perm+0x18d/0x590 [ 1981.547024][T21593] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1981.552873][T21593] ? lock_downgrade+0x6d0/0x6d0 [ 1981.557765][T21593] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1981.563505][T21593] ? __fget_files+0x288/0x3d0 [ 1981.568198][T21593] security_file_ioctl+0x50/0xb0 [ 1981.573144][T21593] __x64_sys_ioctl+0xb3/0x200 [ 1981.577826][T21593] do_syscall_64+0x2d/0x70 [ 1981.582248][T21593] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1981.588149][T21593] RIP: 0033:0x45e219 21:17:17 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) 21:17:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) [ 1981.592044][T21593] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1981.611777][T21593] RSP: 002b:00007f80b059cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.620207][T21593] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1981.628185][T21593] RDX: 0000000020000180 RSI: 00000000c0585611 RDI: 0000000000000003 21:17:18 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20}) [ 1981.636504][T21593] RBP: 00007f80b059cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.644569][T21593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1981.652890][T21593] R13: 00007ffd0b42f28f R14: 00007f80b059d9c0 R15: 000000000119bf8c [ 1981.684938][T21593] ERROR: Out of memory at tomoyo_realpath_from_path. 21:17:18 executing program 5: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f00000000c0)={0x7ff, 'syz1\x00'}) r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:18 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x2}) 21:17:18 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0x5, 0x1, 0x3, 0xc5, 0x8, 0x1ff, 0x4, 0x8, 0x3, 0xf5b, 0xffff, 0x4, 0x5, 0x5, 0x8, {0x101, 0x7}, 0x1, 0x6}}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 21:17:18 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20}) 21:17:18 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, 0x0) 21:17:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:18 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 21:17:18 executing program 5: getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xba, "bfa7df3e20ae71711035e9935ec78a463307f69b7112f4d3f130fcd24055b37c613d9a2fb4929d25e7e7ad854e712728debab38d4740f39b18863d1d7285787732c662b029d979f36dfdc3b1c60eb85d08be2f5b92d58f2f5374d7d14763dd2d606806880b01645857ab9e8f15d15780dcde48e8cb32e4fe93a9d153b2564b82ec8689dd51f7a6c938518c4793548deb0144576d7905477e1c85877b0bbd01cb2131c5c41e42a1099cb608f8fdc22cb8d20f5f22f73aa7615316"}, &(0x7f0000000180)=0xc2) r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) [ 1982.156115][T21616] FAULT_INJECTION: forcing a failure. [ 1982.156115][T21616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1982.228593][T21616] CPU: 1 PID: 21616 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1982.237518][T21616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.247761][T21616] Call Trace: [ 1982.251061][T21616] dump_stack+0x107/0x163 [ 1982.255421][T21616] should_fail.cold+0x5/0xa [ 1982.260049][T21616] ? mark_lock+0xf7/0x1720 [ 1982.264500][T21616] __alloc_pages_nodemask+0x189/0x730 [ 1982.269898][T21616] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1982.277053][T21616] alloc_pages_current+0x18c/0x2a0 [ 1982.282264][T21616] allocate_slab+0x2b6/0x4a0 [ 1982.286882][T21616] ___slab_alloc+0x476/0x790 [ 1982.291585][T21616] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1982.297426][T21616] ? fs_reclaim_acquire+0xb2/0x150 [ 1982.302838][T21616] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1982.308673][T21616] ? __slab_alloc.constprop.0+0x95/0xe0 [ 1982.314577][T21616] __slab_alloc.constprop.0+0x95/0xe0 [ 1982.319984][T21616] ? tomoyo_realpath_from_path+0xc3/0x620 21:17:18 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x3}) 21:17:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @bt={0x5945, 0x7, 0x5, 0xfffffffa, 0xffffffff, 0x1, 0xf, 0x8}}) 21:17:18 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20}) 21:17:18 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) [ 1982.325862][T21616] __kmalloc+0x34a/0x3e0 [ 1982.330133][T21616] tomoyo_realpath_from_path+0xc3/0x620 [ 1982.335715][T21616] ? tomoyo_profile+0x42/0x50 [ 1982.340422][T21616] tomoyo_path_number_perm+0x1d5/0x590 [ 1982.345912][T21616] ? tomoyo_path_number_perm+0x18d/0x590 [ 1982.351588][T21616] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1982.357457][T21616] ? lock_downgrade+0x6d0/0x6d0 [ 1982.362337][T21616] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1982.367922][T21616] ? __fget_files+0x288/0x3d0 [ 1982.372636][T21616] security_file_ioctl+0x50/0xb0 21:17:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1982.377605][T21616] __x64_sys_ioctl+0xb3/0x200 [ 1982.382309][T21616] do_syscall_64+0x2d/0x70 [ 1982.386745][T21616] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1982.392682][T21616] RIP: 0033:0x45e219 [ 1982.396676][T21616] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1982.417167][T21616] RSP: 002b:00007f80b059cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:17:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f00000000c0)=0x84) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) [ 1982.426291][T21616] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1982.434448][T21616] RDX: 0000000020000180 RSI: 00000000c0585611 RDI: 0000000000000003 [ 1982.442512][T21616] RBP: 00007f80b059cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1982.450580][T21616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1982.458560][T21616] R13: 00007ffd0b42f28f R14: 00007f80b059d9c0 R15: 000000000119bf8c 21:17:18 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) socketpair(0x15, 0x80000, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 21:17:18 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:19 executing program 5: syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x94, 0x620080) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7, 0x301000) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x81, [], &(0x7f0000000040)=0x7f}) 21:17:19 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x4}) 21:17:19 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 21:17:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1982.652164][T21650] FAULT_INJECTION: forcing a failure. [ 1982.652164][T21650] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:17:19 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, "9f6100"}, 0x0, 0x0, @userptr=0x20000000002, 0x20000000}) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) [ 1982.715018][T21650] CPU: 1 PID: 21650 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1982.724459][T21650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.729070][T21656] FAULT_INJECTION: forcing a failure. [ 1982.729070][T21656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1982.734894][T21650] Call Trace: [ 1982.734903][T21650] dump_stack+0x107/0x163 [ 1982.734932][T21650] should_fail.cold+0x5/0xa [ 1982.734957][T21650] _copy_from_user+0x2c/0x180 21:17:19 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1982.734982][T21650] video_get_user+0x844/0x9b0 [ 1982.769655][T21650] ? v4l_g_crop+0x380/0x380 [ 1982.774173][T21650] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1982.779992][T21650] ? subdev_do_ioctl+0x3050/0x3050 [ 1982.785116][T21650] video_usercopy+0xfc9/0x12d0 [ 1982.789891][T21650] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1982.795783][T21650] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1982.802025][T21650] ? v4l_enumstd+0x60/0x60 [ 1982.806445][T21650] ? __generic_block_fiemap+0x730/0x740 21:17:19 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x5}) [ 1982.811986][T21650] ? lock_downgrade+0x6d0/0x6d0 [ 1982.816842][T21650] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1982.822401][T21650] ? __fget_files+0x288/0x3d0 [ 1982.827082][T21650] v4l2_ioctl+0x1b3/0x250 [ 1982.831417][T21650] ? v4l2_prio_init+0x20/0x20 [ 1982.836096][T21650] __x64_sys_ioctl+0x193/0x200 [ 1982.840865][T21650] do_syscall_64+0x2d/0x70 [ 1982.845278][T21650] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1982.851264][T21650] RIP: 0033:0x45e219 [ 1982.855177][T21650] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1982.874872][T21650] RSP: 002b:00007f80b059cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.883287][T21650] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1982.891409][T21650] RDX: 0000000020000180 RSI: 00000000c0585611 RDI: 0000000000000003 [ 1982.899382][T21650] RBP: 00007f80b059cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1982.907354][T21650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1982.915345][T21650] R13: 00007ffd0b42f28f R14: 00007f80b059d9c0 R15: 000000000119bf8c [ 1982.931252][T21656] CPU: 0 PID: 21656 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1982.940060][T21656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.950115][T21656] Call Trace: [ 1982.953805][T21656] dump_stack+0x107/0x163 [ 1982.958144][T21656] should_fail.cold+0x5/0xa [ 1982.962660][T21656] _copy_from_user+0x2c/0x180 [ 1982.966041][T21663] FAULT_INJECTION: forcing a failure. [ 1982.966041][T21663] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.967339][T21656] io_uring_setup+0xa3/0x38e0 [ 1982.967374][T21656] ? io_wq_submit_work+0x6f0/0x6f0 [ 1982.990852][T21656] ? wait_for_completion_io+0x260/0x260 [ 1982.996407][T21656] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1983.002651][T21656] ? vfs_write+0x18e/0xa30 [ 1983.007893][T21656] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1983.014370][T21656] ? fput+0x2a/0x50 [ 1983.018345][T21656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1983.024272][T21656] do_syscall_64+0x2d/0x70 [ 1983.028685][T21656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1983.034986][T21656] RIP: 0033:0x45e219 [ 1983.038879][T21656] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.058593][T21656] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1983.067004][T21656] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1983.075229][T21656] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000000065eb [ 1983.083210][T21656] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1983.091176][T21656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1983.099140][T21656] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c 21:17:19 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x6}) 21:17:19 executing program 2 (fault-call:1 fault-nth:1): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 1983.108418][T21663] CPU: 1 PID: 21663 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 1983.117186][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.127356][T21663] Call Trace: [ 1983.131501][T21663] dump_stack+0x107/0x163 [ 1983.135840][T21663] should_fail.cold+0x5/0xa [ 1983.140343][T21663] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1983.146073][T21663] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1983.152720][T21663] should_failslab+0x5/0x10 [ 1983.157231][T21663] __kmalloc+0x72/0x3e0 [ 1983.161504][T21663] tomoyo_realpath_from_path+0xc3/0x620 [ 1983.167764][T21663] ? tomoyo_profile+0x42/0x50 [ 1983.172450][T21663] tomoyo_path_number_perm+0x1d5/0x590 [ 1983.178288][T21663] ? tomoyo_path_number_perm+0x18d/0x590 [ 1983.185109][T21663] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1983.191151][T21663] ? lock_downgrade+0x6d0/0x6d0 [ 1983.196965][T21663] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1983.203126][T21663] ? __fget_files+0x288/0x3d0 [ 1983.207812][T21663] security_file_ioctl+0x50/0xb0 [ 1983.213620][T21663] __x64_sys_ioctl+0xb3/0x200 [ 1983.218300][T21663] do_syscall_64+0x2d/0x70 [ 1983.222743][T21663] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1983.230530][T21663] RIP: 0033:0x45e219 [ 1983.234847][T21663] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.254934][T21663] RSP: 002b:00007f2879417c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1983.264635][T21663] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1983.273770][T21663] RDX: 0000000020000100 RSI: 0000000000005452 RDI: 0000000000000003 [ 1983.282774][T21663] RBP: 00007f2879417ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1983.291730][T21663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1983.299784][T21663] R13: 00007ffcd3a0924f R14: 00007f28794189c0 R15: 000000000119bf8c 21:17:19 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 1983.332319][T21663] ERROR: Out of memory at tomoyo_realpath_from_path. 21:17:19 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:19 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x4, 0x101, 0x7, {0x1, 0x68b5, 0x2, 0x538c786b}}) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x3f, 0x0, 0x2016, 0x32, 0x4, {0x7fffffff, 0x7ff}}) 21:17:19 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x7}) 21:17:19 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:19 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 1983.418846][T21670] FAULT_INJECTION: forcing a failure. [ 1983.418846][T21670] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.471279][T21670] CPU: 0 PID: 21670 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1983.481277][T21670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.491699][T21670] Call Trace: [ 1983.495073][T21670] dump_stack+0x107/0x163 [ 1983.499785][T21670] should_fail.cold+0x5/0xa [ 1983.504484][T21670] ? io_uring_setup+0x4e4/0x38e0 [ 1983.509536][T21670] ? io_uring_setup+0x4e4/0x38e0 [ 1983.514844][T21670] should_failslab+0x5/0x10 [ 1983.519373][T21670] kmem_cache_alloc_trace+0x55/0x360 [ 1983.526605][T21670] io_uring_setup+0x4e4/0x38e0 [ 1983.532078][T21670] ? io_wq_submit_work+0x6f0/0x6f0 [ 1983.537611][T21670] ? wait_for_completion_io+0x260/0x260 [ 1983.544143][T21670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1983.550164][T21670] do_syscall_64+0x2d/0x70 [ 1983.554688][T21670] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1983.560608][T21670] RIP: 0033:0x45e219 [ 1983.565134][T21670] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.585554][T21670] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1983.594949][T21670] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1983.603142][T21670] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000000065eb [ 1983.611301][T21670] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 21:17:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 21:17:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xbb, 0x46b180) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @name="05000000000000004a469c00"}) [ 1983.620487][T21670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.628555][T21670] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c 21:17:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x8}) 21:17:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 21:17:20 executing program 2 (fault-call:1 fault-nth:2): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 1983.701853][T21687] FAULT_INJECTION: forcing a failure. [ 1983.701853][T21687] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.738033][T21688] FAULT_INJECTION: forcing a failure. [ 1983.738033][T21688] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.780409][T21687] CPU: 0 PID: 21687 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1983.789247][T21687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.799312][T21687] Call Trace: [ 1983.802592][T21687] dump_stack+0x107/0x163 [ 1983.806930][T21687] should_fail.cold+0x5/0xa [ 1983.811440][T21687] should_failslab+0x5/0x10 [ 1983.815957][T21687] __kmalloc_node+0x79/0x430 [ 1983.820549][T21687] ? kvmalloc_node+0x61/0xf0 [ 1983.825148][T21687] ? subdev_do_ioctl+0x3050/0x3050 [ 1983.830267][T21687] kvmalloc_node+0x61/0xf0 [ 1983.834691][T21687] video_usercopy+0x5b5/0x12d0 [ 1983.839471][T21687] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1983.846608][T21687] ? v4l_enumstd+0x60/0x60 [ 1983.851035][T21687] ? __generic_block_fiemap+0x730/0x740 [ 1983.856599][T21687] ? __fget_files+0x288/0x3d0 [ 1983.862064][T21687] v4l2_ioctl+0x1b3/0x250 [ 1983.866409][T21687] ? v4l2_prio_init+0x20/0x20 [ 1983.871102][T21687] __x64_sys_ioctl+0x193/0x200 [ 1983.875874][T21687] do_syscall_64+0x2d/0x70 [ 1983.880293][T21687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1983.886195][T21687] RIP: 0033:0x45e219 [ 1983.890108][T21687] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.909733][T21687] RSP: 002b:00007f80b059cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1983.918335][T21687] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 21:17:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x300}) 21:17:20 executing program 4: r0 = syz_open_dev$loop(0x0, 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 1983.926984][T21687] RDX: 0000000020000180 RSI: 00000000c0585611 RDI: 0000000000000003 [ 1983.934968][T21687] RBP: 00007f80b059cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1983.944126][T21687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1983.952110][T21687] R13: 00007ffd0b42f28f R14: 00007f80b059d9c0 R15: 000000000119bf8c [ 1983.975709][T21688] CPU: 0 PID: 21688 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 1983.983031][T21700] FAULT_INJECTION: forcing a failure. [ 1983.983031][T21700] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.984587][T21688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.984600][T21688] Call Trace: [ 1983.984608][T21688] dump_stack+0x107/0x163 [ 1983.984637][T21688] should_fail.cold+0x5/0xa [ 1984.019724][T21688] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1984.025987][T21688] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1984.031377][T21688] should_failslab+0x5/0x10 [ 1984.036446][T21688] __kmalloc+0x72/0x3e0 [ 1984.040629][T21688] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1984.045837][T21688] tomoyo_encode+0x28/0x50 [ 1984.050257][T21688] tomoyo_realpath_from_path+0x186/0x620 [ 1984.055897][T21688] tomoyo_path_number_perm+0x1d5/0x590 [ 1984.061388][T21688] ? tomoyo_path_number_perm+0x18d/0x590 [ 1984.067305][T21688] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1984.074149][T21688] ? lock_downgrade+0x6d0/0x6d0 [ 1984.079165][T21688] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1984.084759][T21688] ? __fget_files+0x288/0x3d0 [ 1984.090018][T21688] security_file_ioctl+0x50/0xb0 [ 1984.095155][T21688] __x64_sys_ioctl+0xb3/0x200 [ 1984.100154][T21688] do_syscall_64+0x2d/0x70 [ 1984.104787][T21688] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1984.111764][T21688] RIP: 0033:0x45e219 [ 1984.115658][T21688] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1984.135615][T21688] RSP: 002b:00007f2879417c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1984.144762][T21688] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1984.153146][T21688] RDX: 0000000020000100 RSI: 0000000000005452 RDI: 0000000000000003 [ 1984.162128][T21688] RBP: 00007f2879417ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.170104][T21688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1984.178937][T21688] R13: 00007ffcd3a0924f R14: 00007f28794189c0 R15: 000000000119bf8c [ 1984.187997][T21700] CPU: 1 PID: 21700 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1984.196779][T21700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.206923][T21700] Call Trace: [ 1984.210204][T21700] dump_stack+0x107/0x163 [ 1984.214901][T21700] should_fail.cold+0x5/0xa [ 1984.219493][T21700] ? io_uring_setup+0x506/0x38e0 [ 1984.224437][T21700] should_failslab+0x5/0x10 [ 1984.225233][T21688] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1984.229111][T21700] kmem_cache_alloc+0x5b/0x440 [ 1984.229138][T21700] io_uring_setup+0x506/0x38e0 [ 1984.229167][T21700] ? io_wq_submit_work+0x6f0/0x6f0 [ 1984.229190][T21700] ? wait_for_completion_io+0x260/0x260 [ 1984.229226][T21700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1984.229252][T21700] do_syscall_64+0x2d/0x70 [ 1984.229270][T21700] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1984.275813][T21700] RIP: 0033:0x45e219 21:17:20 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x500}) 21:17:20 executing program 4: r0 = syz_open_dev$loop(0x0, 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 1984.279710][T21700] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1984.300286][T21700] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1984.308794][T21700] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1984.317122][T21700] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000000065eb [ 1984.325343][T21700] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.333313][T21700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1984.341370][T21700] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c 21:17:20 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:20 executing program 5: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @multicast2}, {0x6}, 0x2, {0x2, 0x4e24, @multicast2}, 'veth0\x00'}) r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r1, 0x0, 0x0) accept(r1, &(0x7f0000000180)=@l2, &(0x7f0000000200)=0x80) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x4, 0x6, 0x4, 0x8, 0x80000000, {r2, r3/1000+60000}, {0x1, 0x0, 0x3, 0x6, 0x80, 0x6, "4ae769ad"}, 0x3, 0x4, @offset=0x80000001, 0x1}) [ 1984.438786][T21707] FAULT_INJECTION: forcing a failure. [ 1984.438786][T21707] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.493682][T21707] CPU: 0 PID: 21707 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1984.502944][T21707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.513028][T21707] Call Trace: [ 1984.516401][T21707] dump_stack+0x107/0x163 [ 1984.520747][T21707] should_fail.cold+0x5/0xa [ 1984.525888][T21707] should_failslab+0x5/0x10 [ 1984.531651][T21707] __kmalloc_node+0x79/0x430 [ 1984.537466][T21707] ? kvmalloc_node+0x61/0xf0 [ 1984.543251][T21707] ? subdev_do_ioctl+0x3050/0x3050 [ 1984.549110][T21707] kvmalloc_node+0x61/0xf0 [ 1984.554092][T21707] video_usercopy+0x5b5/0x12d0 [ 1984.559661][T21707] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1984.566986][T21707] ? v4l_enumstd+0x60/0x60 [ 1984.571409][T21707] ? __generic_block_fiemap+0x730/0x740 [ 1984.577076][T21707] ? __fget_files+0x288/0x3d0 [ 1984.582103][T21707] v4l2_ioctl+0x1b3/0x250 [ 1984.586549][T21707] ? v4l2_prio_init+0x20/0x20 [ 1984.592475][T21707] __x64_sys_ioctl+0x193/0x200 [ 1984.598246][T21707] do_syscall_64+0x2d/0x70 [ 1984.604005][T21707] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1984.610079][T21707] RIP: 0033:0x45e219 [ 1984.615621][T21707] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1984.633796][T21710] FAULT_INJECTION: forcing a failure. [ 1984.633796][T21710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1984.635682][T21707] RSP: 002b:00007f80b059cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1984.635705][T21707] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1984.635720][T21707] RDX: 0000000020000180 RSI: 00000000c0585611 RDI: 0000000000000003 [ 1984.635734][T21707] RBP: 00007f80b059cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.681931][T21707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 21:17:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x600}) 21:17:20 executing program 4: r0 = syz_open_dev$loop(0x0, 0x1, 0x40040) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 21:17:20 executing program 2 (fault-call:1 fault-nth:3): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 1984.689983][T21707] R13: 00007ffd0b42f28f R14: 00007f80b059d9c0 R15: 000000000119bf8c [ 1984.698048][T21710] CPU: 1 PID: 21710 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 1984.706827][T21710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.716883][T21710] Call Trace: [ 1984.720158][T21710] dump_stack+0x107/0x163 [ 1984.726904][T21710] should_fail.cold+0x5/0xa [ 1984.732633][T21710] _copy_to_user+0x2c/0x150 [ 1984.737417][T21710] simple_read_from_buffer+0xcc/0x160 [ 1984.743326][T21710] proc_fail_nth_read+0x187/0x220 [ 1984.748447][T21710] ? proc_exe_link+0x1d0/0x1d0 [ 1984.753984][T21710] ? security_file_permission+0x248/0x560 [ 1984.759917][T21710] ? proc_exe_link+0x1d0/0x1d0 [ 1984.764686][T21710] vfs_read+0x1b5/0x570 [ 1984.768856][T21710] ksys_read+0x12d/0x250 [ 1984.773107][T21710] ? vfs_write+0xa30/0xa30 [ 1984.777523][T21710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1984.783428][T21710] do_syscall_64+0x2d/0x70 [ 1984.787847][T21710] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1984.793745][T21710] RIP: 0033:0x417b11 [ 1984.797635][T21710] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1984.817565][T21710] RSP: 002b:00007f2879417c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1984.825977][T21710] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 1984.833988][T21710] RDX: 000000000000000f RSI: 00007f2879417cb0 RDI: 0000000000000004 21:17:21 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000300)={0x8001, 0x7, 0x4, 0x400, 0x1, {r2, r3/1000+10000}, {0x1, 0x2, 0x80, 0x1f, 0x12, 0x3f, "f59852a0"}, 0x3f, 0x1, @fd, 0x3}) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000200)) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0xa, 0x0, [], {0x0, @bt={0xffffffff, 0xffe, 0x1, 0x1, 0xffffffff, 0x27, 0x100, 0xa95, 0x4, 0x1, 0x4485f165, 0x7, 0xffffffff, 0x921, 0x8, 0xb000acabd9118006, {0x8, 0x3}, 0x81}}}) [ 1984.841990][T21710] RBP: 00007f2879417ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.849964][T21710] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1984.857936][T21710] R13: 00007ffcd3a0924f R14: 00007f28794189c0 R15: 000000000119bf8c 21:17:21 executing program 3 (fault-call:1 fault-nth:5): r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x40040) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 21:17:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x700}) [ 1984.963406][T21721] FAULT_INJECTION: forcing a failure. [ 1984.963406][T21721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1985.030581][T21724] FAULT_INJECTION: forcing a failure. [ 1985.030581][T21724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1985.048334][T21721] CPU: 1 PID: 21721 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1985.057129][T21721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.067184][T21721] Call Trace: [ 1985.070459][T21721] dump_stack+0x107/0x163 [ 1985.074800][T21721] should_fail.cold+0x5/0xa 21:17:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1985.079306][T21721] __alloc_pages_nodemask+0x189/0x730 [ 1985.084686][T21721] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1985.091456][T21721] ? find_held_lock+0x2d/0x110 [ 1985.096230][T21721] ? fs_reclaim_release+0x9c/0xe0 [ 1985.101268][T21721] alloc_pages_current+0x18c/0x2a0 [ 1985.106387][T21721] kmalloc_order+0x32/0xd0 [ 1985.110810][T21721] kmalloc_order_trace+0x14/0x130 [ 1985.116080][T21721] io_uring_setup+0x5cc/0x38e0 [ 1985.120856][T21721] ? io_wq_submit_work+0x6f0/0x6f0 [ 1985.125970][T21721] ? wait_for_completion_io+0x260/0x260 [ 1985.131541][T21721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1985.138395][T21721] do_syscall_64+0x2d/0x70 [ 1985.142913][T21721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1985.148821][T21721] RIP: 0033:0x45e219 [ 1985.152810][T21721] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1985.172577][T21721] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1985.181019][T21721] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1985.189017][T21721] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000000065eb [ 1985.197831][T21721] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1985.206305][T21721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1985.214293][T21721] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c [ 1985.224731][T21724] CPU: 0 PID: 21724 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1985.233552][T21724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.243628][T21724] Call Trace: [ 1985.246992][T21724] dump_stack+0x107/0x163 [ 1985.252472][T21724] should_fail.cold+0x5/0xa [ 1985.257813][T21724] _copy_to_user+0x2c/0x150 [ 1985.263994][T21724] video_put_user+0x3e7/0x790 [ 1985.268728][T21724] ? video_get_user+0x9b0/0x9b0 [ 1985.273627][T21724] ? find_held_lock+0x2d/0x110 [ 1985.278406][T21724] ? __might_fault+0xd3/0x180 [ 1985.283362][T21724] ? lock_downgrade+0x6d0/0x6d0 [ 1985.288285][T21724] ? memset+0x20/0x40 [ 1985.292282][T21724] ? subdev_do_ioctl+0x3050/0x3050 [ 1985.297525][T21724] video_usercopy+0x4db/0x12d0 [ 1985.302538][T21724] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1985.309776][T21724] ? v4l_enumstd+0x60/0x60 [ 1985.314309][T21724] ? __generic_block_fiemap+0x730/0x740 [ 1985.320237][T21724] ? __fget_files+0x288/0x3d0 [ 1985.326139][T21724] v4l2_ioctl+0x1b3/0x250 [ 1985.330568][T21724] ? v4l2_prio_init+0x20/0x20 [ 1985.336307][T21724] __x64_sys_ioctl+0x193/0x200 [ 1985.342212][T21724] do_syscall_64+0x2d/0x70 [ 1985.346746][T21724] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1985.353951][T21724] RIP: 0033:0x45e219 [ 1985.358489][T21724] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:17:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 21:17:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0xff00}) [ 1985.378919][T21724] RSP: 002b:00007f80b059cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1985.387778][T21724] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1985.396493][T21724] RDX: 0000000020000180 RSI: 00000000c0585611 RDI: 0000000000000003 [ 1985.404792][T21724] RBP: 00007f80b059cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1985.413901][T21724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1985.422658][T21724] R13: 00007ffd0b42f28f R14: 00007f80b059d9c0 R15: 000000000119bf8c 21:17:21 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0xa4200) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x7fff}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x2, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) 21:17:21 executing program 2 (fault-call:1 fault-nth:4): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 21:17:21 executing program 3 (fault-call:1 fault-nth:6): r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:21 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 21:17:21 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xffdffffffffffffd, 0x149080) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:22 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x1000000}) 21:17:22 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x10, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1985.599801][T21742] FAULT_INJECTION: forcing a failure. [ 1985.599801][T21742] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.637005][T21745] FAULT_INJECTION: forcing a failure. [ 1985.637005][T21745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1985.651224][T21742] CPU: 0 PID: 21742 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1985.660199][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.670273][T21742] Call Trace: [ 1985.673563][T21742] dump_stack+0x107/0x163 [ 1985.677937][T21742] should_fail.cold+0x5/0xa [ 1985.682472][T21742] ? percpu_ref_init+0xcc/0x3a0 [ 1985.687780][T21742] ? percpu_ref_init+0xcc/0x3a0 [ 1985.692915][T21742] should_failslab+0x5/0x10 [ 1985.697560][T21742] kmem_cache_alloc_trace+0x55/0x360 [ 1985.703817][T21742] ? __io_openat_prep+0x390/0x390 [ 1985.708953][T21742] percpu_ref_init+0xcc/0x3a0 [ 1985.714768][T21742] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1985.721671][T21742] io_uring_setup+0x676/0x38e0 [ 1985.727660][T21742] ? io_wq_submit_work+0x6f0/0x6f0 [ 1985.733988][T21742] ? wait_for_completion_io+0x260/0x260 [ 1985.739558][T21742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1985.745574][T21742] do_syscall_64+0x2d/0x70 [ 1985.750012][T21742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1985.755922][T21742] RIP: 0033:0x45e219 [ 1985.760790][T21742] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1985.780602][T21742] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1985.789117][T21742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 21:17:22 executing program 5: ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, 0x1022, 0x1}) r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:22 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x2000000}) [ 1985.797952][T21742] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000000065eb [ 1985.805932][T21742] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1985.814838][T21742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1985.823097][T21742] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c [ 1985.831371][T21745] CPU: 1 PID: 21745 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1985.842308][T21745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.852371][T21745] Call Trace: [ 1985.855655][T21745] dump_stack+0x107/0x163 [ 1985.860087][T21745] should_fail.cold+0x5/0xa [ 1985.864886][T21745] _copy_to_user+0x2c/0x150 [ 1985.869577][T21745] video_put_user+0x3e7/0x790 [ 1985.875564][T21745] ? video_get_user+0x9b0/0x9b0 [ 1985.881584][T21745] ? find_held_lock+0x2d/0x110 [ 1985.887561][T21745] ? __might_fault+0xd3/0x180 [ 1985.892247][T21745] ? lock_downgrade+0x6d0/0x6d0 [ 1985.898522][T21745] ? memset+0x20/0x40 [ 1985.903393][T21745] ? subdev_do_ioctl+0x3050/0x3050 [ 1985.909547][T21745] video_usercopy+0x4db/0x12d0 [ 1985.914685][T21745] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1985.920946][T21745] ? v4l_enumstd+0x60/0x60 [ 1985.925376][T21745] ? __generic_block_fiemap+0x730/0x740 [ 1985.930936][T21745] ? __fget_files+0x288/0x3d0 [ 1985.935969][T21745] v4l2_ioctl+0x1b3/0x250 [ 1985.941096][T21745] ? v4l2_prio_init+0x20/0x20 [ 1985.945854][T21745] __x64_sys_ioctl+0x193/0x200 [ 1985.950629][T21745] do_syscall_64+0x2d/0x70 [ 1985.955135][T21745] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1985.961023][T21745] RIP: 0033:0x45e219 [ 1985.965012][T21745] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1985.984932][T21745] RSP: 002b:00007f80b059cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1985.993424][T21745] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 21:17:22 executing program 2 (fault-call:1 fault-nth:5): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_setup(0x65eb, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 1986.002196][T21745] RDX: 0000000020000180 RSI: 00000000c0585611 RDI: 0000000000000003 [ 1986.010165][T21745] RBP: 00007f80b059cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1986.018407][T21745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1986.026725][T21745] R13: 00007ffd0b42f28f R14: 00007f80b059d9c0 R15: 000000000119bf8c 21:17:22 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 21:17:22 executing program 3 (fault-call:1 fault-nth:7): r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a382cd8a"}, 0x0, 0x0, @userptr=0xfffffffffffff000, 0x8}) 21:17:22 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x4c01, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1986.135037][T21756] FAULT_INJECTION: forcing a failure. [ 1986.135037][T21756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:17:22 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x3000000}) [ 1986.196593][T21756] CPU: 1 PID: 21756 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1986.205947][T21756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.218391][T21756] Call Trace: [ 1986.221675][T21756] dump_stack+0x107/0x163 [ 1986.226023][T21756] should_fail.cold+0x5/0xa [ 1986.230976][T21756] __alloc_pages_nodemask+0x189/0x730 [ 1986.236388][T21756] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 21:17:22 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x541b, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1986.243191][T21756] ? up_write+0x191/0x560 [ 1986.247624][T21756] ? downgrade_write+0x3a0/0x3a0 [ 1986.252577][T21756] alloc_pages_current+0x18c/0x2a0 [ 1986.257698][T21756] __get_free_pages+0x8/0x40 [ 1986.262380][T21756] io_uring_setup+0x1513/0x38e0 [ 1986.267356][T21756] ? io_wq_submit_work+0x6f0/0x6f0 [ 1986.272481][T21756] ? wait_for_completion_io+0x260/0x260 [ 1986.278311][T21756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.285064][T21756] do_syscall_64+0x2d/0x70 [ 1986.289504][T21756] entry_SYSCALL_64_after_hwframe+0x44/0xa9 21:17:22 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x0, 0x0, 0x200f, 0xffffff01, 0x3, {0x3f, 0x9}, 0x1}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x200, 0xfffffe01, 0x2, 0x80000001, 0x6, 0x4b, 0x10}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0xfffffffe, 0x8, @value}) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)={0xdfd8, 0x3, 0x4, 0x10000, 0x2, {0x77359400}, {0x4, 0x8, 0x40, 0x5, 0x7, 0x6, "c14975a6"}, 0xfffffe01, 0x4, @planes=&(0x7f00000000c0)={0x8, 0x8, @mem_offset=0xba5, 0xef}, 0xffffffff}) [ 1986.295735][T21756] RIP: 0033:0x45e219 [ 1986.299895][T21756] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1986.319976][T21756] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1986.322493][T21762] FAULT_INJECTION: forcing a failure. [ 1986.322493][T21762] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:17:22 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) [ 1986.329704][T21756] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1986.329720][T21756] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000000065eb [ 1986.329733][T21756] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1986.329746][T21756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1986.329758][T21756] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c [ 1986.405634][T21762] CPU: 0 PID: 21762 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1986.415891][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.429193][T21762] Call Trace: [ 1986.433557][T21762] dump_stack+0x107/0x163 [ 1986.439638][T21762] should_fail.cold+0x5/0xa [ 1986.444265][T21762] _copy_from_user+0x2c/0x180 [ 1986.449330][T21762] kstrtouint_from_user+0xb5/0x240 [ 1986.455803][T21762] ? kstrtou8_from_user+0x210/0x210 [ 1986.462171][T21762] proc_fail_nth_write+0x79/0x220 [ 1986.468804][T21762] ? proc_task_getattr+0x1e0/0x1e0 [ 1986.475094][T21762] ? proc_task_getattr+0x1e0/0x1e0 [ 1986.480226][T21762] vfs_write+0x28e/0xa30 [ 1986.484592][T21762] ksys_write+0x12d/0x250 [ 1986.489166][T21762] ? __ia32_sys_read+0xb0/0xb0 [ 1986.495045][T21762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.501004][T21762] do_syscall_64+0x2d/0x70 [ 1986.505513][T21762] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1986.511413][T21762] RIP: 0033:0x417ab1 [ 1986.515810][T21762] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1986.535821][T21762] RSP: 002b:00007f80b059cc70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1986.544701][T21762] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417ab1 21:17:22 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0}) [ 1986.553551][T21762] RDX: 0000000000000001 RSI: 00007f80b059ccb0 RDI: 0000000000000004 [ 1986.561737][T21762] RBP: 00007f80b059cca0 R08: 0000000000000000 R09: 0000000000000000 [ 1986.570588][T21762] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 1986.579448][T21762] R13: 00007ffd0b42f28f R14: 00007f80b059d9c0 R15: 000000000119bf8c [ 1986.582582][T21756] general protection fault, probably for non-canonical address 0xdffffc0000000022: 0000 [#1] PREEMPT SMP KASAN [ 1986.599124][T21756] KASAN: null-ptr-deref in range [0x0000000000000110-0x0000000000000117] [ 1986.607655][T21756] CPU: 1 PID: 21756 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1986.616691][T21756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.627027][T21756] RIP: 0010:io_disable_sqo_submit+0xdb/0x130 [ 1986.634000][T21756] Code: fa 48 c1 ea 03 80 3c 02 00 75 62 48 8b 9b c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 14 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 83 21:17:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0x5421, &(0x7f0000000100)={0x6000000, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cc019f61"}, 0x0, 0x0, @planes=0x0, 0x0, 0x4000000}) 21:17:23 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x2, 0x81, @value=0x7ff}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) 21:17:23 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x0, 0x0, @value}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000440)={0x0, 0x18000000, 0x2010, 0x1}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000300)={0x8001, 0x7, 0x4, 0x400, 0x1, {r2, r3/1000+10000}, {0x1, 0x2, 0x80, 0x1f, 0x12, 0x3f, "f59852a0"}, 0x3f, 0x1, @fd, 0x3}) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000200)) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0xa, 0x0, [], {0x0, @bt={0xffffffff, 0xffe, 0x1, 0x1, 0xffffffff, 0x27, 0x100, 0xa95, 0x4, 0x1, 0x4485f165, 0x7, 0xffffffff, 0x921, 0x8, 0xb000acabd9118006, {0x8, 0x3}, 0x81}}}) [ 1986.654232][T21756] RSP: 0018:ffffc9000302fd78 EFLAGS: 00010017 [ 1986.661021][T21756] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815976e0 [ 1986.670018][T21756] RDX: 0000000000000022 RSI: 0000000000000004 RDI: 0000000000000114 [ 1986.678313][T21756] RBP: ffff8880249f7480 R08: 0000000000000001 R09: 0000000000000003 [ 1986.686282][T21756] R10: fffff52000605fa1 R11: 0000000000000001 R12: fffffffffffffff4 [ 1986.694245][T21756] R13: 0000000000000001 R14: ffff8880249f7054 R15: ffff8880249f7000 [ 1986.702212][T21756] FS: 00007f4e0b43f700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 1986.711144][T21756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1986.717731][T21756] CR2: 00007fa1b75fd0a0 CR3: 00000000289b0000 CR4: 0000000000350ee0 [ 1986.725704][T21756] Call Trace: [ 1986.728974][T21756] io_uring_setup+0x12b1/0x38e0 [ 1986.733831][T21756] ? io_wq_submit_work+0x6f0/0x6f0 [ 1986.738938][T21756] ? wait_for_completion_io+0x260/0x260 [ 1986.744489][T21756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.750380][T21756] do_syscall_64+0x2d/0x70 [ 1986.754785][T21756] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1986.760697][T21756] RIP: 0033:0x45e219 [ 1986.764581][T21756] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1986.784413][T21756] RSP: 002b:00007f4e0b43ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1986.792893][T21756] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1986.800931][T21756] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000000065eb [ 1986.808883][T21756] RBP: 00007f4e0b43eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1986.816890][T21756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1986.824839][T21756] R13: 00007ffe40d130af R14: 00007f4e0b43f9c0 R15: 000000000119bf8c [ 1986.832794][T21756] Modules linked in: [ 1986.836669][T21756] ---[ end trace fac9877dc01f93c1 ]--- [ 1986.842099][T21756] RIP: 0010:io_disable_sqo_submit+0xdb/0x130 [ 1986.848074][T21756] Code: fa 48 c1 ea 03 80 3c 02 00 75 62 48 8b 9b c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 14 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 83 [ 1986.867977][T21756] RSP: 0018:ffffc9000302fd78 EFLAGS: 00010017 [ 1986.874052][T21756] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815976e0 [ 1986.882004][T21756] RDX: 0000000000000022 RSI: 0000000000000004 RDI: 0000000000000114 [ 1986.890307][T21756] RBP: ffff8880249f7480 R08: 0000000000000001 R09: 0000000000000003 [ 1986.898803][T21756] R10: fffff52000605fa1 R11: 0000000000000001 R12: fffffffffffffff4 [ 1986.907234][T21756] R13: 0000000000000001 R14: ffff8880249f7054 R15: ffff8880249f7000 [ 1986.915255][T21756] FS: 00007f4e0b43f700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 1986.925050][T21756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1986.931869][T21756] CR2: 00007fa1b75fd0a0 CR3: 00000000289b0000 CR4: 0000000000350ee0 [ 1986.940084][T21756] Kernel panic - not syncing: Fatal exception [ 1986.949627][T21756] Kernel Offset: disabled [ 1986.954073][T21756] Rebooting in 86400 seconds..