{0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001880)="16"}) 10:28:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x14, 0x0, &(0x7f0000001780)=[@acquire_done], 0x0, 0x0, &(0x7f0000001880)}) 10:28:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)}) [ 436.772219][T28227] binder: 28226:28227 ioctl c0306201 0 returned -14 [ 436.788223][T28234] binder: 28233:28234 ioctl c0306201 0 returned -14 10:28:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001740)}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:28:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:28:33 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10, 0x0, 0x7f000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)}) 10:28:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x14, 0x0, &(0x7f0000001780)=[@acquire_done], 0x0, 0x0, &(0x7f0000001880)}) 10:28:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) [ 436.935591][T28243] binder: 28239:28243 ioctl c0306201 0 returned -14 10:28:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 437.008965][T28248] binder: 28246:28248 ioctl c0306201 0 returned -14 10:28:33 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10, 0x0, 0x7fffff3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)}) [ 437.090161][T28255] binder: 28250:28255 ioctl c0306201 0 returned -14 10:28:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:33 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10, 0x0, 0xc3000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:28:34 executing program 5: syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0901, 0x4, '\x00', @ptr=0x7}}) 10:28:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 3: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0901, 0x4, '\x00', @ptr=0x7}}) 10:28:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:28:34 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10, 0x0, 0xc8031a00}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x2, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) [ 437.405680][T28273] binder: 28271:28273 ioctl c0306201 0 returned -14 10:28:34 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 437.460476][T28279] binder: 28276:28279 ioctl c0306201 0 returned -14 10:28:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10, 0x0, 0xff000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 4: ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0xa00000, 0xfff, 0x8000, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0901, 0x4, '\x00', @ptr=0x7}}) 10:28:34 executing program 3: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "5c3fa23ac46dc788", "74832a6d0d2993de6bc9f823f1b8106a", "8653c178", "2f2cd27037e5c6a5"}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x18, 0x0, &(0x7f0000001780)=[@clear_death, @increfs], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) [ 437.602898][T28291] binder: 28288:28291 ioctl c0306201 0 returned -14 10:28:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:28:34 executing program 0: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "5c3fa23ac46dc788", "74832a6d0d2993de6bc9f823f1b8106a", "8653c178", "2f2cd27037e5c6a5"}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 4: ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @sliced={0xfff, [0x400, 0x0, 0x0, 0x27, 0x2, 0xffff, 0x6, 0x0, 0x1c, 0xc75a, 0x2, 0x3f, 0x8, 0x1, 0x800, 0x7f, 0xff37, 0x400, 0x4, 0x101, 0x1, 0xc2b, 0x7, 0x0, 0x9, 0xb466, 0x40, 0x8, 0xd16, 0x6, 0xf5f6, 0x2, 0x7f, 0x2, 0xfffb, 0x1f, 0x759, 0x0, 0xeee5, 0x9, 0x800, 0x20, 0x0, 0x5, 0x0, 0xf7, 0xff, 0xc3f], 0xe24}}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 10:28:34 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10, 0x0, 0xfffff000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 3: ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @sliced={0xfff, [0x400, 0x0, 0x0, 0x27, 0x2, 0xffff, 0x6, 0x0, 0x1c, 0xc75a, 0x2, 0x3f, 0x8, 0x1, 0x800, 0x7f, 0xff37, 0x400, 0x4, 0x101, 0x1, 0xc2b, 0x7, 0x0, 0x9, 0xb466, 0x40, 0x8, 0xd16, 0x6, 0xf5f6, 0x2, 0x7f, 0x2, 0xfffb, 0x1f, 0x759, 0x0, 0xeee5, 0x9, 0x800, 0x20, 0x0, 0x5, 0x0, 0xf7, 0xff, 0xc3f], 0xe24}}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 10:28:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x10, 0x0, &(0x7f0000001780)=[@clear_death], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 4: ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @sliced={0xfff, [0x400, 0x0, 0x0, 0x27, 0x2, 0xffff, 0x6, 0x0, 0x1c, 0xc75a, 0x2, 0x3f, 0x8, 0x1, 0x800, 0x7f, 0xff37, 0x400, 0x4, 0x101, 0x1, 0xc2b, 0x7, 0x0, 0x9, 0xb466, 0x40, 0x8, 0xd16, 0x6, 0xf5f6, 0x2, 0x7f, 0x2, 0xfffb, 0x1f, 0x759, 0x0, 0xeee5, 0x9, 0x800, 0x20, 0x0, 0x5, 0x0, 0xf7, 0xff, 0xc3f], 0xe24}}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) [ 437.812230][T28307] binder: 28301:28307 ioctl c0306201 0 returned -14 10:28:34 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 3: ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @sliced={0xfff, [0x400, 0x0, 0x0, 0x27, 0x2, 0xffff, 0x6, 0x0, 0x1c, 0xc75a, 0x2, 0x3f, 0x8, 0x1, 0x800, 0x7f, 0xff37, 0x400, 0x4, 0x101, 0x1, 0xc2b, 0x7, 0x0, 0x9, 0xb466, 0x40, 0x8, 0xd16, 0x6, 0xf5f6, 0x2, 0x7f, 0x2, 0xfffb, 0x1f, 0x759, 0x0, 0xeee5, 0x9, 0x800, 0x20, 0x0, 0x5, 0x0, 0xf7, 0xff, 0xc3f], 0xe24}}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 10:28:34 executing program 5: ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @sliced={0xfff, [0x400, 0x0, 0x0, 0x27, 0x2, 0xffff, 0x6, 0x0, 0x1c, 0xc75a, 0x2, 0x3f, 0x8, 0x1, 0x800, 0x7f, 0xff37, 0x400, 0x4, 0x101, 0x1, 0xc2b, 0x7, 0x0, 0x9, 0xb466, 0x40, 0x8, 0xd16, 0x6, 0xf5f6, 0x2, 0x7f, 0x2, 0xfffb, 0x1f, 0x759, 0x0, 0xeee5, 0x9, 0x800, 0x20, 0x0, 0x5, 0x0, 0xf7, 0xff, 0xc3f], 0xe24}}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 10:28:34 executing program 0: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "5c3fa23ac46dc788", "74832a6d0d2993de6bc9f823f1b8106a", "8653c178", "2f2cd27037e5c6a5"}, 0x28) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001900)={0xd0, 0x0, &(0x7f0000001780)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x6, 0x2, 0x22}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @acquire_done, @clear_death, @increfs={0x40046304, 0x3a2e}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x70, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0xa, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/180, 0xb4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/47, 0x2f, 0x1, 0x3c}}, &(0x7f0000001740)={0x0, 0x20, 0x48}}}, @exit_looper], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, 0x0) process_madvise(r1, &(0x7f0000001440)=[{&(0x7f0000000080)="8d28249d2cef87ba7410aca4bc5ed583bbcf7ae3f19005182de4e242464ebe698482a4e86a78692963deae0f9b4aee6f1d6c5629b48473e92ea192f4004a1dbb41a4e6ada3f06244093e0e33c65dde1e79007a3e80f019e1082dbde5894e3ea7d4eac631eba1ffd8c90860b2abb5ec78f813318b2a5d35491295256328335ebfc2886574df060d8eaf675e3838d2ef84c10a034eba210c8046f932810f3ef9f6689b9541ca3c7b3f40d4adaa77ce531f9ed8587304b1ebceec591b4657951f22e70d30b37f0ec38ae500a8ad", 0xcc}, {&(0x7f0000000180)="63a0f79aceb663c0af7700b4cb64b13f322ccf051351d01c233399b257f183c6dff743ba2d60b2753d00924fcdf4294e0440f872d801d3ec1fb2", 0x3a}, {&(0x7f0000001940)="6f8b618c58c64f1d6798ea90fc0bad15a8772abad0c02efc62374c12f36a8c7a55a87cd3fa51ce1efcb62983dbf377a1e682777ded6b87ffecba120c06ac8a6fa001b0e762f91d81ac0abb4e9d2b20466fbb0bb1957b592cc12c6c343192fbc6c655001b7d68119133dc4d2f01939c869ea67145a5755a00430f722a9713c229f5bf26d937751049f83b4c595f7172917d5e5a4261a17cc19db64ca15cbb", 0x37}, {&(0x7f0000000200), 0xe}, {&(0x7f0000000280)="589a07db5dfa44d7b5ff441fada3f6dd7d8015ada6e26af94e88cac85a02c36912e7b36045f648de7b6534294637c75b4438c4de", 0x34}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="5f15d163a7b75562624ac7c5281cf75ef5d9528206aaf947a6b50d71913230d26cabb277f5cfec1651f2706f3cd88b11aef9ed38ac7e3ef1a318a15dd1740a6c987dfd005c18c721e1416b3095f19b73cf387e9583b5b916ac5beb3afcd441eeba5807b5345ca8d10a3b7fd4d1e1422fcfe0a02282949cb5990defeda4d1e9139cfa24ff9fd1c2f12a1029770bbfb58fdd06f48fec19c17124305dbff72e3e82fc236c32c5060739802f0b7e93f67b216e2da87baef2b6420358f7da5c2021534f9adbbd2d40fb240ae4eb5a1b4c05dc765ec734a70cb03d461744e6ac4f745d9589fc4f5d4df5387043e6c490394c", 0xef}, {&(0x7f00000013c0)="145abebea74c591aaa1cfd4d491689903eeefc7951d3902a59391d0496bb2fed55dc9b91016626015552ad47ad1d481e9e80d48b874efe155cb05c41a036e9104c2aeb", 0x43}], 0x8, 0x65, 0x0) 10:28:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x10, 0x0, &(0x7f0000001780)=[@clear_death], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x7d, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:34 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:28:34 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x10, 0x0, &(0x7f0000001780)=[@clear_death], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:34 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = pidfd_getfd(r0, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r10, 0xc040563e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xdb, &(0x7f0000000440)=""/219, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x7fff, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r4, r5, r6, r7, r8, r0, r9, r10, r0]}, 0x80) 10:28:34 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x3, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:34 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:28:35 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000001780)=[@increfs], 0x7b, 0x0, &(0x7f0000001880)="16e415c240caa6c581fc89a11cf2fe73efefc139467dc4e1a7229f31d4cdc052806a4aa19441b9a20f2749f003a4d6dbc7d6b46bd3a6293043017d864a0e930a5165420126c5719f82cb673de68239ff6204e3057a34e8c807b10fed369832f79610b6cffe36cf838bdea9737faa6829f69449196d37fb3393bc17"}) 10:28:35 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x4, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:35 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:35 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = pidfd_getfd(r0, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r10, 0xc040563e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xdb, &(0x7f0000000440)=""/219, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x7fff, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r4, r5, r6, r7, r8, r0, r9, r10, r0]}, 0x80) 10:28:35 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:28:35 executing program 3: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000001780)=[@increfs], 0x0, 0x0, 0x0}) 10:28:35 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x5, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:35 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) 10:28:35 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = pidfd_getfd(r0, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r10, 0xc040563e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xdb, &(0x7f0000000440)=""/219, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x7fff, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r4, r5, r6, r7, r8, r0, r9, r10, r0]}, 0x80) 10:28:35 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x6, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:35 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x8c, 0x0, 0x40000}, 0x20) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, r0, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:35 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = pidfd_getfd(r0, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r10, 0xc040563e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xdb, &(0x7f0000000440)=""/219, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x7fff, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r4, r5, r6, r7, r8, r0, r9, r10, r0]}, 0x80) 10:28:35 executing program 3: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:35 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) 10:28:35 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = pidfd_getfd(r0, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r10, 0xc040563e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xdb, &(0x7f0000000440)=""/219, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x7fff, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r4, r5, r6, r7, r8, r0, r9, r10, r0]}, 0x80) 10:28:35 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x7, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:35 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x8c, 0x0, 0x40000}, 0x20) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, r0, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:35 executing program 3: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:35 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) 10:28:35 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) 10:28:35 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x8, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:35 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x8c, 0x0, 0x40000}, 0x20) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, r0, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:35 executing program 3: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:35 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = pidfd_getfd(r0, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r10, 0xc040563e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xdb, &(0x7f0000000440)=""/219, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x7fff, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r4, r5, r6, r7, r8, r0, r9, r10, r0]}, 0x80) 10:28:35 executing program 3: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:35 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x8c, 0x0, 0x40000}, 0x20) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, r0, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:35 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:35 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:35 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x9, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:36 executing program 3: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:36 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x8c, 0x0, 0x40000}, 0x20) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, r0, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:36 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:36 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) 10:28:36 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0xa, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:36 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x8c, 0x0, 0x40000}, 0x20) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, r0, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:36 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) 10:28:36 executing program 3: syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:36 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:36 executing program 3: syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:36 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0xb, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:36 executing program 3: syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:36 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0) 10:28:36 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x8c, 0x0, 0x40000}, 0x20) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, r0, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:36 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:36 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) 10:28:36 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0xc, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:36 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x8c, 0x0, 0x40000}, 0x20) r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0) 10:28:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:28:36 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0xd, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:36 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:36 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) 10:28:36 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:28:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0) 10:28:36 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0xe, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:36 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:28:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x0, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:37 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x11, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:37 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:37 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) 10:28:37 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x0, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:37 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:37 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x12, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:37 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x0, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:37 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x6, 0xa7b4, 0x400, r0, 0x7fff, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x3}, 0x48) 10:28:37 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x2f, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:37 executing program 2: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:37 executing program 2: syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 10:28:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x0, 0x0, &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:37 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) 10:28:37 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x1fb8, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 10:28:37 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 10:28:37 executing program 2: syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x0, 0x0, &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x80000001, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, '\x00', @p_u16=&(0x7f00000001c0)=0x6}}) 10:28:37 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:37 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, '\x00', @p_u16=0x0}}) 10:28:37 executing program 2: syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x60000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x0, 0x0, &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:37 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:37 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x2, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:37 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:38 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0) 10:28:38 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x3, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:38 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x4, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:38 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) 10:28:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0) 10:28:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x0, &(0x7f0000001740), &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0) 10:28:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x0, &(0x7f0000001740), &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:38 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x0, &(0x7f0000001740), &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:38 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x5, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:38 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:38 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) 10:28:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:38 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x6, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:38 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:38 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], 0x0, 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:38 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, 0x0) 10:28:38 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], 0x0, 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:38 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x8, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:38 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:38 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], 0x0, 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:38 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:38 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xa, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:39 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x48, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:39 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:39 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909da, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:39 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:39 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x4c, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 10:28:39 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:39 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x68, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 10:28:39 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) 10:28:39 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 10:28:39 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:39 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x6c, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xd17, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, '\x00', @p_u32=&(0x7f0000000140)=0x8}}) 10:28:39 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:39 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:39 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x74, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:39 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, '\x00', @p_u32=0x0}}) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7a, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) 10:28:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xc3, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xf0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:40 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:40 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, '\x00', @p_u32=0x0}}) 10:28:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:40 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x14c, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x300, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:40 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 10:28:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x500, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 10:28:40 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:40 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:40 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 10:28:40 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x600, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1, &(0x7f0000001740)=@raw=[@func], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x80, &(0x7f00000017c0)=""/128, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x700, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xa00, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 10:28:40 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:40 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:40 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x1f00, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:40 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:40 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 10:28:41 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x2000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:41 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x4800, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x4c00, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:41 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x4c01, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:41 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:41 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:41 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x6800, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x6c00, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:41 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:41 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7400, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:41 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7a00, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:41 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:41 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:41 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:41 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:41 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7f00, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:42 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:42 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:42 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xc300, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:42 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:42 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xf000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:42 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:42 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:42 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:42 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xff00, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:42 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:42 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x1a03c8, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:42 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:42 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 10:28:42 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:42 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:42 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 10:28:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 10:28:42 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x200000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) [ 446.120114][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.126504][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 10:28:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 10:28:42 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:42 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:43 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xf0ffff, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 10:28:43 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x1000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:43 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 10:28:43 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:43 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:43 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x2000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:43 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:43 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x3000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:43 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:43 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:43 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x4000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:43 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:43 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:43 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x5000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:43 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:43 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:43 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x6000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:43 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:43 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:43 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:44 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x8000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:44 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:44 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:44 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:44 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:44 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xa000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:44 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:44 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:44 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x1f000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:44 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:44 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:28:44 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:44 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x3fffff7f, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:44 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:44 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:44 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x48000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:44 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:44 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:44 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x4c000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:44 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x4c010000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:44 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:44 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x68000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:45 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:45 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x6c000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:45 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) 10:28:45 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:45 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x74000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:45 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:45 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 10:28:45 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7a000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:45 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:45 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7f000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:45 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:45 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x7fffff3f, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:45 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:45 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:45 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:45 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xc3000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:45 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:46 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:46 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:46 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xc8031a00, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:46 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:46 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) 10:28:46 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xff000000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:46 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:46 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10:28:46 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:46 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xfffff000, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:46 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) 10:28:46 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0xffffffff, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:46 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:46 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:46 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10:28:46 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:46 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:46 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) 10:28:46 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x2, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:46 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:46 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:47 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x3, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:47 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x4, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:47 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10:28:47 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:47 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:47 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x5, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:47 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:47 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x6, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:47 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:47 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:47 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:47 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:47 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:47 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:47 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:47 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:47 executing program 5: openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:47 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:47 executing program 5: openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x8, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:48 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:48 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xa, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 5: openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:48 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:48 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:48 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x48, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x4c, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x0, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:48 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:48 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:48 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x68, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x6c, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x74, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:48 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7a, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x0, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xc3, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:48 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:48 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xf0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:48 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:48 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:48 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:49 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x14c, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x300, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x0, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:49 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x500, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x600, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 10:28:49 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0x0, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:49 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:49 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x700, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xa00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x1f00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:49 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0x0, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x2000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:49 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xa00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x4800, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:49 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:49 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x4c00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:49 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0x0, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:50 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:50 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x4c01, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:50 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:50 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x6800, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:50 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:50 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x6c00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:50 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:50 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:50 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x0, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:50 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:50 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:50 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7400, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:50 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:50 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7a00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:50 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:50 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:50 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x0, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:50 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:50 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7f00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:50 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:50 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:50 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:50 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xc300, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:51 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x0, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:51 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:51 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xf000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:51 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:51 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:51 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xff00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:51 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:51 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x0, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:51 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x1a03c8, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:51 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:51 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:51 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x0, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:51 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x200000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:51 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:28:51 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:51 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:51 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xf0ffff, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:51 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:51 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x0, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:51 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:52 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:52 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x1000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:52 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 10:28:52 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:52 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x2000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:52 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:52 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) 10:28:52 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:52 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x3000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:52 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:52 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:52 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x4000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:52 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:52 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) 10:28:52 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x5000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:52 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:52 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:52 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x6000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:52 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:52 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:52 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:52 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) 10:28:53 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:53 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:53 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:53 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:53 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x8000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:53 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:53 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:53 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xa000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:53 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:53 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:53 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:53 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:53 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x1f000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:53 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:53 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:53 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:53 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:28:53 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x3fffff7f, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:53 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:53 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x48000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:53 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:54 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:54 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:54 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x0, 0x4}, 0x48) 10:28:54 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x4c000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:54 executing program 5: openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:54 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:54 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x4c010000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:54 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:54 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x68000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:54 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x0, 0x4}, 0x48) 10:28:54 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:54 executing program 5: openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:54 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:54 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x6c000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:54 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:54 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x74000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:54 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:55 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x0, 0x4}, 0x48) 10:28:55 executing program 5: openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10:28:55 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:55 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:55 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7a000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:55 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:55 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:55 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4}, 0x48) 10:28:55 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7f000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:55 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:55 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x7fffff3f, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:55 executing program 5: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:28:55 executing program 5: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:28:55 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4}, 0x48) 10:28:55 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:55 executing program 5: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:28:55 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:55 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xc3000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:55 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:55 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:56 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xc8031a00, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:56 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:56 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:56 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:56 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4}, 0x48) 10:28:56 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xff000000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:56 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4}, 0x48) 10:28:56 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:56 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:56 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xfffff000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:56 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:56 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:56 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:56 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xffffffff, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:56 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:56 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:56 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:56 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:56 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:57 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xfffff000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:57 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xfffff000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0xfffff000, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:57 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x48, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:57 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:57 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4c, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:58 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:58 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:58 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x68, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:58 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:58 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:58 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x6c, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:58 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:58 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:58 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x74, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:58 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:58 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7a, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:58 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:58 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:59 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:59 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xc3, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:59 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:59 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:59 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:59 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:59 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xf0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:59 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:59 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:59 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:59 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x14c, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:59 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:59 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x300, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:59 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:59 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:28:59 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:59 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x500, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:28:59 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:28:59 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:00 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:00 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x600, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:00 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x500, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:00 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:00 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:00 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x700, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:00 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:00 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:00 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:00 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xa00, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:00 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:00 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:00 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:00 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x1f00, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:00 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x2000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:00 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:00 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:00 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:00 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:00 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4800, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:00 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:00 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4c00, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:00 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:01 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:01 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4c01, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:01 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:01 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:01 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:01 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:01 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x6800, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:01 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:01 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x6c00, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:01 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:01 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7400, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:01 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:01 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:01 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7a00, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:01 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:01 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:01 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:01 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7f00, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:01 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:02 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xc300, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:02 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:02 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xf000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:02 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:02 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xff00, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:02 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:02 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x14c, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:02 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x1a03c8, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:02 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x68, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:02 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x200000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:02 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x48, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:02 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:02 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:02 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:02 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xf0ffff, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:03 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:03 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x200000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:03 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x1000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:03 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:03 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:03 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:03 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:03 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:03 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x2000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:03 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:03 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:03 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:03 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:03 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x3000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:03 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:03 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:04 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:04 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:04 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:04 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:04 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x5000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:04 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:04 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:04 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:29:04 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x6000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:04 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:04 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:04 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:04 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:04 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) 10:29:04 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x8000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:04 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:05 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:05 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xa000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:05 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:05 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:05 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x1f000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:05 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:05 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:05 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x3fffff7f, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:05 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:05 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:05 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:05 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x48000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:05 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4c000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:05 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:05 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) 10:29:05 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:05 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x4c010000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:05 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:05 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:05 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:05 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x68000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:06 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:06 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 10:29:06 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:06 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:06 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x6c000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:06 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:06 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:06 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:06 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x74000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:06 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:06 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:06 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7a000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:06 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:06 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7f000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:06 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:29:06 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:07 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:07 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:07 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x7fffff3f, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:07 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:07 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:29:07 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xc3000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:07 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:07 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:07 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:07 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xc8031a00, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:07 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:29:07 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:07 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:07 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:07 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xff000000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:07 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:07 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) 10:29:07 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:08 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xfffff000, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:08 executing program 5: socket$l2tp(0x2, 0x2, 0x73) 10:29:08 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:08 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:08 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:08 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:08 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0xffffffff, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:08 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) 10:29:08 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:08 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:08 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:08 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x7d) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:08 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:08 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:08 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x90) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:08 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x7ffffffff000) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:08 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:09 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) 10:29:09 executing program 1: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x200, 0x3}) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) pidfd_getfd(r3, r1, 0x0) 10:29:09 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:09 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:09 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:09 executing program 1: pidfd_open(0xffffffffffffffff, 0x0) (async) r0 = pidfd_open(0x0, 0x0) (async) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x200, 0x3}) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) (async) pidfd_getfd(r3, r1, 0x0) 10:29:09 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:09 executing program 1: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x200, 0x3}) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) pidfd_getfd(r3, r1, 0x0) pidfd_open(0xffffffffffffffff, 0x0) (async) pidfd_open(0x0, 0x0) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$swradio(0x0, 0x0, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r2, 0x0) (async) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x200, 0x3}) (async) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) (async) pidfd_getfd(r3, r1, 0x0) (async) 10:29:09 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 10:29:09 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r1, 0x0) 10:29:09 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:09 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_RENAMEAT={0x23, 0x15, 0x0, r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', r0}, 0x210) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="a80100001500000200000000fddbdf252309b0000100c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9e20001002a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e5651700ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a900000000"], 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000602e1723687138845829d93b555523de05e901bc0461a087780dfd5d2421e8cc1e42449442d2509b4b22d2507b1456448f17b09a4297fbccec0461f8"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x3, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r0, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r3, r0, 0x0) 10:29:09 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:09 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x200, 0x3}) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) pidfd_getfd(r3, r1, 0x0) 10:29:09 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:09 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_RENAMEAT={0x23, 0x15, 0x0, r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', r0}, 0x210) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000602e1723687138845829d93b555523de05e901bc0461a087780dfd5d2421e8cc1e42449442d2509b4b22d2507b1456448f17b09a4297fbccec0461f8"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x3, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r0, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r3, r0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$swradio(0x0, 0x0, 0x2) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_RENAMEAT={0x23, 0x15, 0x0, r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', r0}, 0x210) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="a80100001500000200000000fddbdf252309b0000100c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9e20001002a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e5651700ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a900000000"], 0x1a8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000602e1723687138845829d93b555523de05e901bc0461a087780dfd5d2421e8cc1e42449442d2509b4b22d2507b1456448f17b09a4297fbccec0461f8"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x3, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r0, 0x1, r3]}, 0x80) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async) pidfd_getfd(r3, r0, 0x0) (async) 10:29:09 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x200, 0x3}) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) pidfd_getfd(r3, r1, 0x0) 10:29:09 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:09 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:10 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:10 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) (async, rerun: 32) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_RENAMEAT={0x23, 0x15, 0x0, r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', r0}, 0x210) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) (async, rerun: 64) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) (rerun: 64) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000602e1723687138845829d93b555523de05e901bc0461a087780dfd5d2421e8cc1e42449442d2509b4b22d2507b1456448f17b09a4297fbccec0461f8"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x3, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r0, 0x1, r3]}, 0x80) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async, rerun: 64) pidfd_getfd(r3, r0, 0x0) (rerun: 64) 10:29:10 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x200, 0x3}) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) pidfd_getfd(r3, r1, 0x0) 10:29:10 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:10 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:29:10 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:10 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x200, 0x3}) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:10 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:10 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:10 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) process_mrelease(r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000001240)={0x2, 0x9, "386a03122b83eb9a97b550a8c42fbb5f57639034d26f40a8143f32c691fe154c", 0xe2f7, 0x1, 0xfffffffa, 0x538463bc, 0x141}) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, &(0x7f0000001180)=""/93, 0x5d}, 0x100) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x1a8, 0x15, 0x308, 0x0, 0x25dfdbfd, {0x23, 0x9}}, 0x1bb}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 10:29:10 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:10 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:10 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) process_mrelease(r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000001240)={0x2, 0x9, "386a03122b83eb9a97b550a8c42fbb5f57639034d26f40a8143f32c691fe154c", 0xe2f7, 0x1, 0xfffffffa, 0x538463bc, 0x141}) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, &(0x7f0000001180)=""/93, 0x5d}, 0x100) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x1a8, 0x15, 0x308, 0x0, 0x25dfdbfd, {0x23, 0x9}}, 0x1bb}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x1a8, 0x15, 0x308, 0x0, 0x25dfdbfd, {0x23, 0x9}}, 0x1bb}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 10:29:10 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r3, r1, 0x1, r3]}, 0x80) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="ba2ee3afc1dfacc6ac1e9d736758de0134caf0033544c29885c43a2d7dbc1c888e0d5a6fe513cd4bfc4f7185400f0238da0339823b9ddf180f102b973366916a8a4e7a7e20946c42dd48c056db77b0a7e1d0f50f71c118ea7a5715003094e88a3006276450a5b667bd31794dac49db0e98938981948836bb2d6ea05510e3e208552358889d823716195b5ed4eae16d2e059219ea2560e986929928f6a0c2d6e15104deca3c5a9b4c98278beed4355bf2b84faecac822211d62709e689a499f4cc598266d3fb94c5441827a0fa132a92c49dae4a696798fde940051d7f0a42a88c8a1a9383e25cd3f33b93340c6d7d8b8a194a7e4dc290338dd6adc8f2bcafe", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="50946fbc2b3cfa0a8fbfaec8062134059d3f7b9e375d9d52d825a7731cc5d0c38519626c44df0b76b4c3b8d4aa21d58af121148556f0de40809fc2821bdcc8550f92572ef92d53e9907c64277258aac5c82174f5dc23bdf7378242b621f8d6c251c98f7d0f6d2fc2e2a35a2c45adc1d9863823d3fbcb3d1cfdad53f27325ec048ed3d24ef540118e4a6a38b75bfda1bdc02e647abdce71d5d8b2cb377a3e2666aa6bc7e842a805878bf2609a1576bd9ed4f1c05dc90c991841d09f85c03fa29f13eba8133546bf389a45cfbb708979bf80f04a2d31c9bf6ae1ee414b8152a4fa3ed1cdc1b1c38fe4c01d7fdafb57b380d0314216ddbf81d24149d9ce85", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:10 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:29:10 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:10 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="50946fbc2b3cfa0a8fbfaec8062134059d3f7b9e375d9d52d825a7731cc5d0c38519626c44df0b76b4c3b8d4aa21d58af121148556f0de40809fc2821bdcc8550f92572ef92d53e9907c64277258aac5c82174f5dc23bdf7378242b621f8d6c251c98f7d0f6d2fc2e2a35a2c45adc1d9863823d3fbcb3d1cfdad53f27325ec048ed3d24ef540118e4a6a38b75bfda1bdc02e647abdce71d5d8b2cb377a3e2666aa6bc7e842a805878bf2609a1576bd9ed4f1c05dc90c991841d09f85c03fa29f13eba8133546bf389a45cfbb708979bf80f04a2d31c9bf6ae1ee414b8152a4fa3ed1cdc1b1c38fe4c01d7fdafb57b380d0314216ddbf81d24149d9ce85", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:10 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:10 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) (async) process_mrelease(r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000001240)={0x2, 0x9, "386a03122b83eb9a97b550a8c42fbb5f57639034d26f40a8143f32c691fe154c", 0xe2f7, 0x1, 0xfffffffa, 0x538463bc, 0x141}) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) (async) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, &(0x7f0000001180)=""/93, 0x5d}, 0x100) (async) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x1a8, 0x15, 0x308, 0x0, 0x25dfdbfd, {0x23, 0x9}}, 0x1bb}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 10:29:11 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="50946fbc2b3cfa0a8fbfaec8062134059d3f7b9e375d9d52d825a7731cc5d0c38519626c44df0b76b4c3b8d4aa21d58af121148556f0de40809fc2821bdcc8550f92572ef92d53e9907c64277258aac5c82174f5dc23bdf7378242b621f8d6c251c98f7d0f6d2fc2e2a35a2c45adc1d9863823d3fbcb3d1cfdad53f27325ec048ed3d24ef540118e4a6a38b75bfda1bdc02e647abdce71d5d8b2cb377a3e2666aa6bc7e842a805878bf2609a1576bd9ed4f1c05dc90c991841d09f85c03fa29f13eba8133546bf389a45cfbb708979bf80f04a2d31c9bf6ae1ee414b8152a4fa3ed1cdc1b1c38fe4c01d7fdafb57b380d0314216ddbf81d24149d9ce85", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:11 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:11 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000f9ffffff000000000400000084c369ec22186e20a5c0458b6c319a850cde7b16f7e26d32c33f7b345bbe280056ef1489781f949ab49dc8928ed1c1400b9ff832f0e2ef3adebfc843e85675ec236343dd0cd68231ee577fe27b503cf07945eef74abb77"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:11 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:11 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000f9ffffff000000000400000084c369ec22186e20a5c0458b6c319a850cde7b16f7e26d32c33f7b345bbe280056ef1489781f949ab49dc8928ed1c1400b9ff832f0e2ef3adebfc843e85675ec236343dd0cd68231ee577fe27b503cf07945eef74abb77"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async) pidfd_getfd(r2, r0, 0x0) 10:29:11 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:11 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="ba2ee3afc1dfacc6ac1e9d736758de0134caf0033544c29885c43a2d7dbc1c888e0d5a6fe513cd4bfc4f7185400f0238da0339823b9ddf180f102b973366916a8a4e7a7e20946c42dd48c056db77b0a7e1d0f50f71c118ea7a5715003094e88a3006276450a5b667bd31794dac49db0e98938981948836bb2d6ea05510e3e208552358889d823716195b5ed4eae16d2e059219ea2560e986929928f6a0c2d6e15104deca3c5a9b4c98278beed4355bf2b84faecac822211d62709e689a499f4cc598266d3fb94c5441827a0fa132a92c49dae4a696798fde940051d7f0a42a88c8a1a9383e25cd3f33b93340c6d7d8b8a194a7e4dc290338dd6adc8f2bcafe", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="50946fbc2b3cfa0a8fbfaec8062134059d3f7b9e375d9d52d825a7731cc5d0c38519626c44df0b76b4c3b8d4aa21d58af121148556f0de40809fc2821bdcc8550f92572ef92d53e9907c64277258aac5c82174f5dc23bdf7378242b621f8d6c251c98f7d0f6d2fc2e2a35a2c45adc1d9863823d3fbcb3d1cfdad53f27325ec048ed3d24ef540118e4a6a38b75bfda1bdc02e647abdce71d5d8b2cb377a3e2666aa6bc7e842a805878bf2609a1576bd9ed4f1c05dc90c991841d09f85c03fa29f13eba8133546bf389a45cfbb708979bf80f04a2d31c9bf6ae1ee414b8152a4fa3ed1cdc1b1c38fe4c01d7fdafb57b380d0314216ddbf81d24149d9ce85", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:11 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) (async) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x1a8, 0x15, 0x200, 0x0, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000f9ffffff000000000400000084c369ec22186e20a5c0458b6c319a850cde7b16f7e26d32c33f7b345bbe280056ef1489781f949ab49dc8928ed1c1400b9ff832f0e2ef3adebfc843e85675ec236343dd0cd68231ee577fe27b503cf07945eef74abb77"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async) pidfd_getfd(r2, r0, 0x0) 10:29:11 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 2: socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="50946fbc2b3cfa0a8fbfaec8062134059d3f7b9e375d9d52d825a7731cc5d0c38519626c44df0b76b4c3b8d4aa21d58af121148556f0de40809fc2821bdcc8550f92572ef92d53e9907c64277258aac5c82174f5dc23bdf7378242b621f8d6c251c98f7d0f6d2fc2e2a35a2c45adc1d9863823d3fbcb3d1cfdad53f27325ec048ed3d24ef540118e4a6a38b75bfda1bdc02e647abdce71d5d8b2cb377a3e2666aa6bc7e842a805878bf2609a1576bd9ed4f1c05dc90c991841d09f85c03fa29f13eba8133546bf389a45cfbb708979bf80f04a2d31c9bf6ae1ee414b8152a4fa3ed1cdc1b1c38fe4c01d7fdafb57b380d0314216ddbf81d24149d9ce85", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:11 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:11 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MKDIRAT={0x25, 0x41, 0x0, r2, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000080)={0x0, 0x81, 0x5, '\x00', &(0x7f0000000040)=0xff}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x6, {0x2, 0x0, 0x3, 0x800}}) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="a80100001500000200000000fddbdf252309b0000100c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9e20001002a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7124809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a900000000"], 0x1a8}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000f9ffffffe522afe504e8dcdd3f6060cd0000000000000000"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r4, r0, 0x1, r4]}, 0x80) r6 = pidfd_getfd(r2, r5, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x0, 0xf7, 0x41587b4eabc1084c}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x0, 0x6c, 0x1}) pidfd_getfd(r4, r0, 0x0) 10:29:11 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="ba2ee3afc1dfacc6ac1e9d736758de0134caf0033544c29885c43a2d7dbc1c888e0d5a6fe513cd4bfc4f7185400f0238da0339823b9ddf180f102b973366916a8a4e7a7e20946c42dd48c056db77b0a7e1d0f50f71c118ea7a5715003094e88a3006276450a5b667bd31794dac49db0e98938981948836bb2d6ea05510e3e208552358889d823716195b5ed4eae16d2e059219ea2560e986929928f6a0c2d6e15104deca3c5a9b4c98278beed4355bf2b84faecac822211d62709e689a499f4cc598266d3fb94c5441827a0fa132a92c49dae4a696798fde940051d7f0a42a88c8a1a9383e25cd3f33b93340c6d7d8b8a194a7e4dc290338dd6adc8f2bcafe", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:11 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:11 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MKDIRAT={0x25, 0x41, 0x0, r2, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000080)={0x0, 0x81, 0x5, '\x00', &(0x7f0000000040)=0xff}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000080)={0x0, 0x81, 0x5, '\x00', &(0x7f0000000040)=0xff}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x6, {0x2, 0x0, 0x3, 0x800}}) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000f9ffffffe522afe504e8dcdd3f6060cd0000000000000000"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r4, r0, 0x1, r4]}, 0x80) pidfd_getfd(r2, r5, 0x0) (async) r6 = pidfd_getfd(r2, r5, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x0, 0xf7, 0x41587b4eabc1084c}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x0, 0xf7, 0x41587b4eabc1084c}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x0, 0x6c, 0x1}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x0, 0x6c, 0x1}) pidfd_getfd(r4, r0, 0x0) (async) pidfd_getfd(r4, r0, 0x0) 10:29:11 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:12 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:12 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) 10:29:12 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:29:12 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MKDIRAT={0x25, 0x41, 0x0, r2, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000080)={0x0, 0x81, 0x5, '\x00', &(0x7f0000000040)=0xff}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x6, {0x2, 0x0, 0x3, 0x800}}) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000f9ffffffe522afe504e8dcdd3f6060cd0000000000000000"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r4, r0, 0x1, r4]}, 0x80) r6 = pidfd_getfd(r2, r5, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x0, 0xf7, 0x41587b4eabc1084c}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x0, 0x6c, 0x1}) pidfd_getfd(r4, r0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$swradio(0x0, 0x0, 0x2) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MKDIRAT={0x25, 0x41, 0x0, r2, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}, 0x200) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000080)={0x0, 0x81, 0x5, '\x00', &(0x7f0000000040)=0xff}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x6, {0x2, 0x0, 0x3, 0x800}}) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) sendmsg$SOCK_DESTROY(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000f9ffffffe522afe504e8dcdd3f6060cd0000000000000000"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r4, r0, 0x1, r4]}, 0x80) (async) pidfd_getfd(r2, r5, 0x0) (async) openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x0, 0xf7, 0x41587b4eabc1084c}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x0, 0x6c, 0x1}) (async) pidfd_getfd(r4, r0, 0x0) (async) 10:29:12 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) [ 475.812345][T31930] ================================================================== [ 475.820482][T31930] BUG: KASAN: slab-use-after-free in nfc_llcp_find_local+0xcf/0xe0 [ 475.828450][T31930] Read of size 8 at addr ffff88802bdf9000 by task syz-executor.3/31930 [ 475.836732][T31930] [ 475.839089][T31930] CPU: 0 PID: 31930 Comm: syz-executor.3 Not tainted 6.2.0-syzkaller-13413-g0a3f9a6b0265 #0 [ 475.849203][T31930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 475.859308][T31930] Call Trace: [ 475.862625][T31930] [ 475.865603][T31930] dump_stack_lvl+0xd9/0x150 [ 475.870247][T31930] print_address_description.constprop.0+0x2c/0x3c0 [ 475.876875][T31930] ? nfc_llcp_find_local+0xcf/0xe0 [ 475.882022][T31930] kasan_report+0x11c/0x130 [ 475.886546][T31930] ? nfc_llcp_find_local+0xcf/0xe0 [ 475.891693][T31930] nfc_llcp_find_local+0xcf/0xe0 [ 475.896654][T31930] nfc_llcp_unregister_device+0x1a/0x260 [ 475.902314][T31930] nfc_unregister_device+0x196/0x330 [ 475.907616][T31930] virtual_ncidev_close+0x52/0xb0 [ 475.912707][T31930] __fput+0x27c/0xa90 [ 475.916724][T31930] ? virtual_nci_open+0x10/0x10 [ 475.921685][T31930] task_work_run+0x16f/0x270 [ 475.926344][T31930] ? task_work_cancel+0x30/0x30 [ 475.931234][T31930] exit_to_user_mode_prepare+0x23c/0x250 [ 475.936907][T31930] syscall_exit_to_user_mode+0x1d/0x50 [ 475.942431][T31930] do_syscall_64+0x46/0xb0 [ 475.946960][T31930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 475.952881][T31930] RIP: 0033:0x7fe00903dfab [ 475.957325][T31930] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 475.976981][T31930] RSP: 002b:00007ffd5969c230 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 475.985463][T31930] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007fe00903dfab [ 475.993557][T31930] RDX: 0000000000000000 RSI: 0000001b30d21dac RDI: 0000000000000004 [ 476.001549][T31930] RBP: 00007fe0091ad980 R08: 0000000000000000 R09: 000000005f033d0b [ 476.009584][T31930] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000739c2 [ 476.017587][T31930] R13: 00007ffd5969c330 R14: 00007fe0091ac050 R15: 0000000000000032 [ 476.025587][T31930] [ 476.028632][T31930] [ 476.030969][T31930] Allocated by task 31940: [ 476.035417][T31930] kasan_save_stack+0x22/0x40 [ 476.040224][T31930] kasan_set_track+0x25/0x30 [ 476.044848][T31930] __kasan_kmalloc+0xa3/0xb0 [ 476.049504][T31930] nfc_llcp_register_device+0x49/0x9e0 [ 476.055000][T31930] nfc_register_device+0x70/0x3c0 [ 476.060047][T31930] nci_register_device+0x7cb/0xb50 [ 476.065193][T31930] virtual_ncidev_open+0x14f/0x230 [ 476.070343][T31930] misc_open+0x37a/0x4a0 [ 476.074642][T31930] chrdev_open+0x26a/0x770 [ 476.079079][T31930] do_dentry_open+0x6cc/0x13f0 [ 476.083861][T31930] path_openat+0x1baa/0x2750 [ 476.088483][T31930] do_filp_open+0x1ba/0x410 [ 476.093022][T31930] do_sys_openat2+0x16d/0x4c0 [ 476.097727][T31930] __x64_sys_openat+0x143/0x1f0 [ 476.102614][T31930] do_syscall_64+0x39/0xb0 [ 476.107064][T31930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 476.112978][T31930] [ 476.115310][T31930] Freed by task 31937: [ 476.119406][T31930] kasan_save_stack+0x22/0x40 [ 476.124139][T31930] kasan_set_track+0x25/0x30 [ 476.128756][T31930] kasan_save_free_info+0x2b/0x40 [ 476.133821][T31930] ____kasan_slab_free+0x13b/0x1a0 [ 476.138966][T31930] __kmem_cache_free+0xcd/0x2c0 [ 476.143863][T31930] nfc_llcp_unregister_device+0x1ba/0x260 [ 476.149640][T31930] nfc_unregister_device+0x196/0x330 [ 476.155035][T31930] virtual_ncidev_close+0x52/0xb0 [ 476.160114][T31930] __fput+0x27c/0xa90 [ 476.164138][T31930] task_work_run+0x16f/0x270 [ 476.168775][T31930] exit_to_user_mode_prepare+0x23c/0x250 [ 476.174438][T31930] syscall_exit_to_user_mode+0x1d/0x50 [ 476.179944][T31930] do_syscall_64+0x46/0xb0 [ 476.184382][T31930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 476.190300][T31930] [ 476.192631][T31930] The buggy address belongs to the object at ffff88802bdf9000 [ 476.192631][T31930] which belongs to the cache kmalloc-2k of size 2048 [ 476.206706][T31930] The buggy address is located 0 bytes inside of [ 476.206706][T31930] freed 2048-byte region [ffff88802bdf9000, ffff88802bdf9800) [ 476.220452][T31930] [ 476.222798][T31930] The buggy address belongs to the physical page: [ 476.229215][T31930] page:ffffea0000af7e40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bdf9 [ 476.239402][T31930] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 476.246983][T31930] raw: 00fff00000000200 ffff888012440800 ffffea000077a450 ffffea000177a610 [ 476.255581][T31930] raw: 0000000000000000 ffff88802bdf9000 0000000100000001 0000000000000000 [ 476.264173][T31930] page dumped because: kasan: bad access detected [ 476.270597][T31930] page_owner tracks the page as allocated [ 476.276325][T31930] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x3420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 28753, tgid 28751 (syz-executor.3), ts 442717808605, free_ts 442716817804 [ 476.298227][T31930] get_page_from_freelist+0x1190/0x2f80 [ 476.303826][T31930] __alloc_pages+0x1cb/0x5c0 [ 476.308459][T31930] cache_grow_begin+0x9b/0x3b0 [ 476.313258][T31930] cache_alloc_refill+0x27f/0x380 [ 476.318314][T31930] __kmem_cache_alloc_node+0x360/0x3f0 [ 476.323811][T31930] kmalloc_trace+0x26/0x60 [ 476.328271][T31930] nfc_llcp_register_device+0x49/0x9e0 [ 476.333763][T31930] nfc_register_device+0x70/0x3c0 [ 476.338807][T31930] nci_register_device+0x7cb/0xb50 [ 476.343965][T31930] virtual_ncidev_open+0x14f/0x230 [ 476.349111][T31930] misc_open+0x37a/0x4a0 [ 476.353382][T31930] chrdev_open+0x26a/0x770 [ 476.357817][T31930] do_dentry_open+0x6cc/0x13f0 [ 476.362594][T31930] path_openat+0x1baa/0x2750 [ 476.367256][T31930] do_filp_open+0x1ba/0x410 [ 476.371808][T31930] do_sys_openat2+0x16d/0x4c0 [ 476.376504][T31930] page last free stack trace: [ 476.381182][T31930] free_pcp_prepare+0x668/0xb50 [ 476.386064][T31930] free_unref_page+0x1d/0x490 [ 476.390766][T31930] vfree+0x180/0x7e0 [ 476.394684][T31930] do_arpt_get_ctl+0x7b1/0x8f0 [ 476.399550][T31930] nf_getsockopt+0x76/0xd0 [ 476.403998][T31930] ip_getsockopt+0x189/0x1e0 [ 476.408633][T31930] tcp_getsockopt+0x99/0x100 [ 476.413271][T31930] __sys_getsockopt+0x21a/0x6a0 [ 476.418161][T31930] __x64_sys_getsockopt+0xbe/0x160 [ 476.423303][T31930] do_syscall_64+0x39/0xb0 [ 476.427768][T31930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 476.433680][T31930] [ 476.436106][T31930] Memory state around the buggy address: [ 476.441740][T31930] ffff88802bdf8f00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 476.449809][T31930] ffff88802bdf8f80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc 10:29:13 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) [ 476.457905][T31930] >ffff88802bdf9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.465973][T31930] ^ [ 476.470046][T31930] ffff88802bdf9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.478120][T31930] ffff88802bdf9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.486186][T31930] ================================================================== 10:29:13 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10:29:13 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}, 0x200) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), 0x4) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000740), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000000)) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0xffffffffffffff4c, 0x15, 0x100, 0x8003, 0x25dfdbfd, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "c593440010192561ed6a0b3e6cdd8a3d9850024d73de3bffd508bcb1633c6cbd42e06449dbcdaa8b228093a02de33c0446aebe92eb8290e41ed100bf80f66da932eabe7bc0d9a9aff2f2d6ed5a040e1e64b360c142d74ea5ca0701897be9e490c3539ca4974d99878316e3ec6ef87fde26c614020a6c8ac92824bef61e8c3b1e21c1ca6dcc945ff015bb972414b609cbe6af725da7a9078f1517fe44c1d24409f4309ec3eb145e967969f3a9"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "2a34ac6116356f1850a04d107e5c09e11416c80f9d76e81107d52333d09be6be2565b8213aaf14093f5bf0e0a215735f21999ee1e2f385b63fea65a3528b2df5d3383c801fc88d6419d25e8f84ade613876f016d7295218db2d0a8bc77378c6acc946e057f119e965c53e9b57c11a4c2795cce79428b13609d43e23794f6209ed7129ad734c240facaa4beb69ff5754809e56517d2ad2e5c400871a480b6fe3ec7b143d61e68f094eccf76a5201987c96ae8cd92774249626671cce04a35dfd9026b242f80f4e391c205004b3c7bb8e3e911ba8f01f3e6383dba90ccc3a9"}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu], &(0x7f0000001780)='syzkaller\x00', 0x3, 0x80, &(0x7f00000017c0)=""/128, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001840), 0x8, 0x10, &(0x7f0000001880)={0x5, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r2, r0, 0x1, r2]}, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000001cc0)={0x1, 0x0, {0x2, 0x40, 0x1015, 0x2, 0xb, 0x7, 0x2, 0x5}}) pidfd_getfd(r2, r0, 0x0) 10:29:13 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) [ 476.657201][T31930] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 476.664474][T31930] CPU: 1 PID: 31930 Comm: syz-executor.3 Not tainted 6.2.0-syzkaller-13413-g0a3f9a6b0265 #0 [ 476.674603][T31930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 476.684875][T31930] Call Trace: [ 476.688209][T31930] [ 476.691173][T31930] dump_stack_lvl+0xd9/0x150 [ 476.695829][T31930] panic+0x61b/0x6c0 [ 476.699784][T31930] ? panic_smp_self_stop+0x90/0x90 10:29:13 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pidfd_getfd(r0, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x8001, 0xfffff800, 0x7, 0x63c, 0xffffffffffffffff, 0x2f, '\x00', r1, r0, 0x4, 0x4}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) [ 476.704950][T31930] ? preempt_schedule_thunk+0x1a/0x20 [ 476.710404][T31930] ? preempt_schedule_common+0x45/0xb0 [ 476.715913][T31930] check_panic_on_warn+0xb1/0xc0 [ 476.720901][T31930] end_report+0xf6/0x180 [ 476.725195][T31930] ? nfc_llcp_find_local+0xcf/0xe0 [ 476.730394][T31930] kasan_report+0xf9/0x130 [ 476.734888][T31930] ? nfc_llcp_find_local+0xcf/0xe0 [ 476.740050][T31930] nfc_llcp_find_local+0xcf/0xe0 [ 476.745036][T31930] nfc_llcp_unregister_device+0x1a/0x260 [ 476.750729][T31930] nfc_unregister_device+0x196/0x330 10:29:13 executing program 5: process_madvise(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000040)="744a9e7e", 0x4}, {&(0x7f0000000080)="eae0eae52ee7f154f09dc4f698375dbe35fc23bf768e92ac6a3c84864518e68d14ac2ceb2d23a97f380467ccd4981ce389b04b86ba65f7be7d3ed287434aa15945ebcb04de40640f803e975f238538f6cf35c35bbfe932d186b5f0ec0bc1a13ea3f6c496d9ca4b714fe3c04e09200ff3ea18af27f11ff44033bc1b06e5e3c6d8742544e11b34d541c1a4ed4cd8660158aced231d3f7460d78e0251bbbc0f0362", 0xa0}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="79bbc8a1de6e6fce1efd472a469c8cbfd2e16b0f2b61d6713dc311546edfe6f200a96f7727298478d83e157a24515d0b321013f5a615166cf49655adee060f7926a67ae6885a3975ab9eb7424070c45dee75e2ad0fd5683bae19305924b7b9304dd1e5b0c3144a4cecdfaf9940baec2fa6154ee0ad99b6a6e444", 0x7a}, {&(0x7f00000002c0)="5babeb7896d062d214f85cba39eb6b7c579a19fa69e35292736be51f93de18cdf81012c34385540146225d6cbdef9b776df460801eceb1a43acb925f2cd8b41f41209f4102ba66e617b59ace5d9d966d5ec2542bd2d87c3dd39a596907234e5f94596d8464de9be15bb32c1d3560a1f0b1432d9968b67df755837e", 0x7b}, {&(0x7f0000000340)="b1a2dd97e2f9b6641bc1625c63a3d35e618d594db7ac4b427e91cb7a30705ca13eefdd76570b43314fd0796bf68030ae2a0395d005e741dc2b932e0f683fb0b33abe056d91e074d1b8e3f3ed7d6e4d4342d10b4683d9fd347c38441748780d53a942fb9ea70db0558e73bcf405ae15720e5b5881a9348316a84948d9857a6a9ccb21cfc8469f", 0x86}, {&(0x7f0000000400)="2baae8282c245342ca555fe56db433b07be12524f4ee9f7cd606a615", 0x1c}, {&(0x7f0000000440)="50946fbc2b3cfa0a8fbfaec8062134059d3f7b9e375d9d52d825a7731cc5d0c38519626c44df0b76b4c3b8d4aa21d58af121148556f0de40809fc2821bdcc8550f92572ef92d53e9907c64277258aac5c82174f5dc23bdf7378242b621f8d6c251c98f7d0f6d2fc2e2a35a2c45adc1d9863823d3fbcb3d1cfdad53f27325ec048ed3d24ef540118e4a6a38b75bfda1bdc02e647abdce71d5d8b2cb377a3e2666aa6bc7e842a805878bf2609a1576bd9ed4f1c05dc90c991841d09f85c03fa29f13eba8133546bf389a45cfbb708979bf80f04a2d31c9bf6ae1ee414b8152a4fa3ed1cdc1b1c38fe4c01d7fdafb57b380d0314216ddbf81d24149d9ce85", 0xfd}, {&(0x7f0000000540)="bc0ab556d0c2ab31e0ec9a64948b7ac90d25fcaa6a456c542f4678df16d807e4c8b189c88a170d37939312d71a3114b0711ecf0850891f9df10f6ea34d40f1375d061a704090db49bdd839dc7d84c01ae783fd3d4d8d0c6cb7898d77eab6ddffc60e44d1619912586fa476a23640c787678c9422dc3c46e4e223c3fa6d476727c09eedbda15969d48a5c70a71e46fd6842626d2bb7fc645feedfc3", 0x9b}, {&(0x7f0000000600)="db3d9e1ce19197f22f12c58af5f9d1e2f4a35dffee4643cf2fb62a68894394cbdad85f374e24009d6bfba69b1d56320b812030de66d98392e7fd2777bb26c6b4bac98ffa5c40ae6277e96d77be4632c32fd08e6de136006176c9a3c68b11bb6f286c63c31ebf842a02c3a34c905ca882bf64d40121fecfde165573dc8b427245e0083cc91a015980b87aaf87c7221499efaf2e108a0e42f4b4d958625b5977a55b31dc1b06f83475dc6267476f53100173a1b33f2b3e652e30581fc37f4e7499", 0xc0}], 0xa, 0xa, 0x0) [ 476.756061][T31930] virtual_ncidev_close+0x52/0xb0 [ 476.761145][T31930] __fput+0x27c/0xa90 [ 476.765193][T31930] ? virtual_nci_open+0x10/0x10 [ 476.770132][T31930] task_work_run+0x16f/0x270 [ 476.774789][T31930] ? task_work_cancel+0x30/0x30 [ 476.779737][T31930] exit_to_user_mode_prepare+0x23c/0x250 [ 476.785435][T31930] syscall_exit_to_user_mode+0x1d/0x50 [ 476.790970][T31930] do_syscall_64+0x46/0xb0 [ 476.795456][T31930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 476.801390][T31930] RIP: 0033:0x7fe00903dfab [ 476.805868][T31930] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 476.825596][T31930] RSP: 002b:00007ffd5969c230 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 476.834052][T31930] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007fe00903dfab [ 476.842063][T31930] RDX: 0000000000000000 RSI: 0000001b30d21dac RDI: 0000000000000004 [ 476.850075][T31930] RBP: 00007fe0091ad980 R08: 0000000000000000 R09: 000000005f033d0b [ 476.858080][T31930] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000739c2 [ 476.866174][T31930] R13: 00007ffd5969c330 R14: 00007fe0091ac050 R15: 0000000000000032 [ 476.874206][T31930] [ 476.877429][T31930] Kernel Offset: disabled [ 476.881780][T31930] Rebooting in 86400 seconds..