0x3000, 0x1e640fff, 0x12, r1, 0x100000000) 00:34:40 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x146}) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400480) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:40 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4089, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000000540)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000740)=""/188, 0xad}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f0000003e40)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x21, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/174, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x10141, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1c76efff, 0x12, r1, 0x100000000) 00:34:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1e7c0fff, 0x12, r1, 0x100000000) 00:34:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0xffffffffffffffff, 0x80302) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={r4}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) close_range(r2, r5, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x400, 0xbc, {0x77359400}, {0x4, 0x2, 0x5, 0x7, 0x8, 0x1, "8de2937b"}, 0x5, 0x4, {}, 0x4, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x6, r6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2721.133195][T32181] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1f000000, 0x12, r1, 0x100000000) 00:34:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x403, 0xc26c, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x7a9, 0x1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:40 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x146}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400480) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:40 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4089, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000000540)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000740)=""/188, 0xad}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f0000003e40)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x21, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/174, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x10141, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1f9a8fff, 0x12, r1, 0x100000000) 00:34:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:34:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x403, 0xc26c, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x7a9, 0x1}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1ffff000, 0x12, r1, 0x100000000) 00:34:40 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) 00:34:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:34:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x403, 0xc26c, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x7a9, 0x1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x403, 0xc26c, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x7a9, 0x1}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:34:40 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async, rerun: 64) close(r2) (rerun: 64) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async, rerun: 32) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4089, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000), 0x0, &(0x7f0000000540)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000740)=""/188, 0xad}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f0000003e40)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x21, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/174, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x10141, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async, rerun: 64) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:40 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) (async) 00:34:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x20168fff, 0x12, r1, 0x100000000) 00:34:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:34:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={0xd1eb, 0xdc1, 0x7fe00000, 0x40, 0x38, 0x810, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2721.742066][T32623] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:40 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008004) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x8, 0x3, 0x80000001}) 00:34:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x204f0700, 0x12, r1, 0x100000000) 00:34:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:40 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008004) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x8, 0x3, 0x80000001}) 00:34:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x1}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={0xd1eb, 0xdc1, 0x7fe00000, 0x40, 0x38, 0x810, 0x6}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (rerun: 32) 00:34:41 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) (async) 00:34:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:41 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4080, 0xff0}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x204f0fff, 0x12, r1, 0x100000000) 00:34:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={0xd1eb, 0xdc1, 0x7fe00000, 0x40, 0x38, 0x810, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2128dfff, 0x12, r1, 0x100000000) [ 2722.056841][ T470] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:41 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008004) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x8, 0x3, 0x80000001}) 00:34:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x6, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x21de6fff, 0x12, r1, 0x100000000) 00:34:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x21f80fff, 0x12, r1, 0x100000000) 00:34:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x6, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:41 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4080, 0xff0}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:41 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r2 = dup(r0) syz_open_dev$dri(&(0x7f00000002c0), 0xfffffffffffffffe, 0x41) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r4}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) 00:34:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x21fecfff, 0x12, r1, 0x100000000) 00:34:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x6, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2722.462679][ T819] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:41 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r2 = dup(r0) syz_open_dev$dri(&(0x7f00000002c0), 0xfffffffffffffffe, 0x41) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r4}) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) 00:34:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0xc2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x6, 0x40}) 00:34:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x22710fff, 0x12, r1, 0x100000000) 00:34:41 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4080, 0xff0}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4080, 0xff0}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x23281fff, 0x12, r1, 0x100000000) 00:34:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r0, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={r1, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x10000000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0xaad, 0xfffffffffffffffd, 0x0, 0x4, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0xfffffffffffffff8, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3f, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9, 0x3, 0x80000000, 0x4005]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000100)={r1, 0x3a7d, 0x80000000, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={r1, 0x5, 0x401}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000680)={r1, 0x7e00000000, 0x0, [0x100000001, 0x8, 0x1, 0x10000, 0x7f800000], [0x7ff, 0xc, 0x1, 0x8, 0x8, 0x3, 0x6a, 0x5, 0x7, 0x6, 0xfb58, 0xfffffffffffffffd, 0x6, 0x2, 0x20, 0x0, 0x3, 0xffffffff, 0x9, 0x6, 0x0, 0xffffffffffffa066, 0x7, 0x8000000000000001, 0x100000001, 0x3, 0x6, 0x4, 0x4, 0x4, 0x6, 0x1, 0x616, 0x7fff, 0x8, 0x8, 0x3f, 0x100, 0x6, 0x2, 0x2, 0x7, 0x8, 0x100000001, 0xffffffff00000001, 0x200, 0xffffffffffffffaf, 0x0, 0x4, 0x3, 0x81, 0x0, 0x1f, 0x8, 0xff, 0x9, 0x9, 0x2, 0x0, 0x7ff, 0x7, 0x1, 0x80000000, 0x1, 0x4, 0xfff, 0x100000000, 0x5279411e, 0x4, 0x53a, 0x16fb, 0x9, 0xffffffffffffffff, 0xffffffff, 0x5, 0x3ff, 0x6, 0x2, 0x6711, 0x0, 0x9, 0x5, 0xe4ca, 0x5, 0x3, 0x1, 0x9, 0x0, 0xffffffffffffff00, 0x6, 0x101, 0x80, 0x3, 0x2, 0x81, 0x6, 0x55db, 0x3f800000, 0x10000, 0x2, 0x921, 0x2, 0x40, 0x5, 0x7, 0x1, 0x2e2, 0x400, 0x1, 0x6, 0x8001, 0x80000001, 0xf0, 0x5, 0x80, 0xfffffffffffffff9, 0x8a5, 0x4, 0xe1f, 0x8, 0x1000]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000180)={0x0, 0x0, {0x8, @struct={0x3e, 0xfffeffff}, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xff, 0xfffffffeffffffff, 0x14, @struct={0x0, 0x4}, 0x200, 0x0, [0x3, 0x800000000, 0x3, 0x2, 0x7fffffffffffffff, 0x7fffffff]}, {0x400000000000000, @usage=0x40000000, 0x0, 0x2f9, 0x100, 0xffff, 0x8000, 0xbf, 0x478, @usage=0xb53, 0x200, 0x80, [0x1ff, 0x2, 0x5, 0x5, 0x0, 0x8000000000000001]}, {0x1000, @usage=0x3, r1, 0x6, 0x8000000000000000, 0x3, 0x5, 0x4, 0x0, @usage=0x1, 0xfffffff7, 0x1ff, [0x6, 0x800, 0xd94b, 0x401, 0x101, 0x5]}, {0x80000001, 0x70, 0x5}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00034, 0x0, 0x0, 0x0, 0x10000000003) 00:34:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0xc2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x6, 0x40}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0xc2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x6, 0x40}) (async) 00:34:41 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r2 = dup(r0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0xfffffffffffffffe, 0x41) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r4}) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x6) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async, rerun: 64) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) [ 2722.722722][ T1047] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x23340fff, 0x12, r1, 0x100000000) 00:34:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0xc2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x6, 0x40}) 00:34:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) (async) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) shutdown(r0, 0x1) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={r1, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x10000000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0xaad, 0xfffffffffffffffd, 0x0, 0x4, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0xfffffffffffffff8, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3f, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9, 0x3, 0x80000000, 0x4005]}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000100)={r1, 0x3a7d, 0x80000000, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={r1, 0x5, 0x401}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000680)={r1, 0x7e00000000, 0x0, [0x100000001, 0x8, 0x1, 0x10000, 0x7f800000], [0x7ff, 0xc, 0x1, 0x8, 0x8, 0x3, 0x6a, 0x5, 0x7, 0x6, 0xfb58, 0xfffffffffffffffd, 0x6, 0x2, 0x20, 0x0, 0x3, 0xffffffff, 0x9, 0x6, 0x0, 0xffffffffffffa066, 0x7, 0x8000000000000001, 0x100000001, 0x3, 0x6, 0x4, 0x4, 0x4, 0x6, 0x1, 0x616, 0x7fff, 0x8, 0x8, 0x3f, 0x100, 0x6, 0x2, 0x2, 0x7, 0x8, 0x100000001, 0xffffffff00000001, 0x200, 0xffffffffffffffaf, 0x0, 0x4, 0x3, 0x81, 0x0, 0x1f, 0x8, 0xff, 0x9, 0x9, 0x2, 0x0, 0x7ff, 0x7, 0x1, 0x80000000, 0x1, 0x4, 0xfff, 0x100000000, 0x5279411e, 0x4, 0x53a, 0x16fb, 0x9, 0xffffffffffffffff, 0xffffffff, 0x5, 0x3ff, 0x6, 0x2, 0x6711, 0x0, 0x9, 0x5, 0xe4ca, 0x5, 0x3, 0x1, 0x9, 0x0, 0xffffffffffffff00, 0x6, 0x101, 0x80, 0x3, 0x2, 0x81, 0x6, 0x55db, 0x3f800000, 0x10000, 0x2, 0x921, 0x2, 0x40, 0x5, 0x7, 0x1, 0x2e2, 0x400, 0x1, 0x6, 0x8001, 0x80000001, 0xf0, 0x5, 0x80, 0xfffffffffffffff9, 0x8a5, 0x4, 0xe1f, 0x8, 0x1000]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000180)={0x0, 0x0, {0x8, @struct={0x3e, 0xfffeffff}, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xff, 0xfffffffeffffffff, 0x14, @struct={0x0, 0x4}, 0x200, 0x0, [0x3, 0x800000000, 0x3, 0x2, 0x7fffffffffffffff, 0x7fffffff]}, {0x400000000000000, @usage=0x40000000, 0x0, 0x2f9, 0x100, 0xffff, 0x8000, 0xbf, 0x478, @usage=0xb53, 0x200, 0x80, [0x1ff, 0x2, 0x5, 0x5, 0x0, 0x8000000000000001]}, {0x1000, @usage=0x3, r1, 0x6, 0x8000000000000000, 0x3, 0x5, 0x4, 0x0, @usage=0x1, 0xfffffff7, 0x1ff, [0x6, 0x800, 0xd94b, 0x401, 0x101, 0x5]}, {0x80000001, 0x70, 0x5}}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00034, 0x0, 0x0, 0x0, 0x10000000003) 00:34:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x234e0700, 0x12, r1, 0x100000000) 00:34:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:42 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:42 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x40080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x81, 0xffffff4e, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0xfff, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x100000000) 00:34:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x23f31fff, 0x12, r1, 0x100000000) 00:34:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2723.068967][ T1415] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:42 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x40080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x81, 0xffffff4e, 0x8}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0xfff, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x100000000) 00:34:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) (async) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) shutdown(r0, 0x1) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={r1, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x10000000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0xaad, 0xfffffffffffffffd, 0x0, 0x4, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0xfffffffffffffff8, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3f, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9, 0x3, 0x80000000, 0x4005]}) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000100)={r1, 0x3a7d, 0x80000000, 0x1}) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={r1, 0x5, 0x401}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000680)={r1, 0x7e00000000, 0x0, [0x100000001, 0x8, 0x1, 0x10000, 0x7f800000], [0x7ff, 0xc, 0x1, 0x8, 0x8, 0x3, 0x6a, 0x5, 0x7, 0x6, 0xfb58, 0xfffffffffffffffd, 0x6, 0x2, 0x20, 0x0, 0x3, 0xffffffff, 0x9, 0x6, 0x0, 0xffffffffffffa066, 0x7, 0x8000000000000001, 0x100000001, 0x3, 0x6, 0x4, 0x4, 0x4, 0x6, 0x1, 0x616, 0x7fff, 0x8, 0x8, 0x3f, 0x100, 0x6, 0x2, 0x2, 0x7, 0x8, 0x100000001, 0xffffffff00000001, 0x200, 0xffffffffffffffaf, 0x0, 0x4, 0x3, 0x81, 0x0, 0x1f, 0x8, 0xff, 0x9, 0x9, 0x2, 0x0, 0x7ff, 0x7, 0x1, 0x80000000, 0x1, 0x4, 0xfff, 0x100000000, 0x5279411e, 0x4, 0x53a, 0x16fb, 0x9, 0xffffffffffffffff, 0xffffffff, 0x5, 0x3ff, 0x6, 0x2, 0x6711, 0x0, 0x9, 0x5, 0xe4ca, 0x5, 0x3, 0x1, 0x9, 0x0, 0xffffffffffffff00, 0x6, 0x101, 0x80, 0x3, 0x2, 0x81, 0x6, 0x55db, 0x3f800000, 0x10000, 0x2, 0x921, 0x2, 0x40, 0x5, 0x7, 0x1, 0x2e2, 0x400, 0x1, 0x6, 0x8001, 0x80000001, 0xf0, 0x5, 0x80, 0xfffffffffffffff9, 0x8a5, 0x4, 0xe1f, 0x8, 0x1000]}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000180)={0x0, 0x0, {0x8, @struct={0x3e, 0xfffeffff}, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xff, 0xfffffffeffffffff, 0x14, @struct={0x0, 0x4}, 0x200, 0x0, [0x3, 0x800000000, 0x3, 0x2, 0x7fffffffffffffff, 0x7fffffff]}, {0x400000000000000, @usage=0x40000000, 0x0, 0x2f9, 0x100, 0xffff, 0x8000, 0xbf, 0x478, @usage=0xb53, 0x200, 0x80, [0x1ff, 0x2, 0x5, 0x5, 0x0, 0x8000000000000001]}, {0x1000, @usage=0x3, r1, 0x6, 0x8000000000000000, 0x3, 0x5, 0x4, 0x0, @usage=0x1, 0xfffffff7, 0x1ff, [0x6, 0x800, 0xd94b, 0x401, 0x101, 0x5]}, {0x80000001, 0x70, 0x5}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00034, 0x0, 0x0, 0x0, 0x10000000003) 00:34:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x24291fff, 0x12, r1, 0x100000000) 00:34:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0xfff, 0x1}) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x100000000) 00:34:42 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:42 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x40080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x81, 0xffffff4e, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x40080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x81, 0xffffff4e, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) 00:34:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x257b0100, 0x12, r1, 0x100000000) [ 2723.416416][ T1768] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x25896fff, 0x12, r1, 0x100000000) 00:34:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x1000, 0x1c1803) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) fallocate(r1, 0x64, 0x9, 0x2) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r5}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x2, 0x18}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000240)) read$alg(0xffffffffffffffff, &(0x7f0000002440)=""/237, 0xed) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x80}, 0x3f) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) write$6lowpan_enable(r1, &(0x7f0000000380)='0', 0x1) r8 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_setup(0x149, &(0x7f0000000280)={0x0, 0xac58, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000300)) 00:34:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:34:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x26236fff, 0x12, r1, 0x100000000) 00:34:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:42 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:42 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2, 0x9, 0x86, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xfed, 0x200080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xd6f, 0x40, 0x80000000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r5, 0x100000000) [ 2723.747892][ T2016] syz-executor.0: epoll_ctl support in io_uring is deprecated and will be removed in a future Linux kernel version. 00:34:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x264e0fff, 0x12, r1, 0x100000000) 00:34:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x1000, 0x1c1803) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) fallocate(r1, 0x64, 0x9, 0x2) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) (async) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r5}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x2, 0x18}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000240)) (async) read$alg(0xffffffffffffffff, &(0x7f0000002440)=""/237, 0xed) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x80}, 0x3f) (async) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) write$6lowpan_enable(r1, &(0x7f0000000380)='0', 0x1) r8 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_setup(0x149, &(0x7f0000000280)={0x0, 0xac58, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000300)) 00:34:42 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2, 0x9, 0x86, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xfed, 0x200080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xd6f, 0x40, 0x80000000}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r5, 0x100000000) 00:34:42 executing program 3: r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) unshare(0x6c060000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xf, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x7, 0x0, 0x7ff, 0x80000001, 0x7, 0x10001, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 00:34:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:43 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x26c00100, 0x12, r1, 0x100000000) 00:34:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) [ 2723.980691][ T2255] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x1000, 0x1c1803) (rerun: 32) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) fallocate(r1, 0x64, 0x9, 0x2) (async, rerun: 64) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r5}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x2, 0x18}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000240)) (async) read$alg(0xffffffffffffffff, &(0x7f0000002440)=""/237, 0xed) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x80}, 0x3f) (async, rerun: 64) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) (async, rerun: 64) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) write$6lowpan_enable(r1, &(0x7f0000000380)='0', 0x1) (async) r8 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x149, &(0x7f0000000280)={0x0, 0xac58, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000300)) (rerun: 64) [ 2724.109257][ T2418] __nla_validate_parse: 3 callbacks suppressed [ 2724.109306][ T2418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:34:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:43 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2, 0x9, 0x86, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0xfed, 0x200080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xd6f, 0x40, 0x80000000}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r5, 0x100000000) 00:34:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x27070400, 0x12, r1, 0x100000000) 00:34:43 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x27440700, 0x12, r1, 0x100000000) 00:34:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:43 executing program 3: r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) unshare(0x6c060000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xf, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x7, 0x0, 0x7ff, 0x80000001, 0x7, 0x10001, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) getpid() (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) (async) read(r1, &(0x7f0000000080)=""/1, 0x1) (async) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) (async) close(r1) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) (async) unshare(0x6c060000) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xf, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x7, 0x0, 0x7ff, 0x80000001, 0x7, 0x10001, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) 00:34:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getflags(r0, 0x401) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x0, "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"}) 00:34:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2884cfff, 0x12, r1, 0x100000000) 00:34:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getflags(r0, 0x401) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x0, "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"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) fcntl$getflags(r0, 0x401) (async) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x0, "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"}) (async) 00:34:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x994, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfbd, 0x8}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0x2bd, 0x2a, [@random={0x1, 0xf9, "32f31c7c95d1df6d662aa8862309085514597a2fb084ee4270fe2662bb577dba2af2619c3924fe53a5986c785522996496b4f8190b522acd2a221edeb39a10235099455ff9c8c35f87892d1b46b40be227862c1cce8fad409798c3049718e7c5a49336e221cb354eb7081806b839052636ab52c8347a04b57f13d02b7d1e2c02c3089379cf5493fecf6238d4c8f6ff80d9d77e4583321ac925e724f9f1f68b3d620659f522f181caccf39fa3cf29c447c181fe70555c7627a3305667e33e0fcc4167405bdc3d110ad676906a4f02b8687a123e9cb7d99ac1261418f9f2cbe5aac19603ff57bc085423cafe5e347f6cf2adaece9e2e1b8e2e25"}, @supported_rates={0x1, 0x6, [{0x1b}, {0x18, 0x1}, {0x4}, {0x5}, {0x6, 0x1}, {0xb, 0x1}]}, @random={0x2, 0x90, "bb9c0986c29e2afb859e8fd55a69e6e90c22ac2573190a178ef5e9d61a5f448c9f23aa81c15807adbde7eaa453a230255206895575f08069ea597b1748fdd03de5c348b78823e367deb444c0a75cfacae17c32a31c66e9c389b8135e6b4cc5708782b90e43dae2c8e60a334d407ea9726e0c7f42b6dab68aa00845531c8acc22b25aa5f1f2c4792970604efbdc7922ba"}, @mesh_chsw={0x76, 0x6, {0x3f, 0x6, 0x1b, 0xfff7}}, @gcr_ga={0xbd, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x4, 0x40, @device_b, 0x1200, 0xfffffffc, 0x42a}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0xaf, 0x70, 0x9, 0x2}}, @perr={0x84, 0xe3, {0x9, 0xf, [@not_ext={{}, @device_a, 0xfffffff8, "", 0x30}, @not_ext={{}, @device_b, 0x4d, "", 0x36}, @ext={{}, @device_b, 0x5, @device_b, 0x40}, @not_ext={{}, @device_a, 0xffffffff, "", 0x36}, @ext={{}, @device_a, 0x9, @device_b, 0x1e}, @ext={{}, @device_a, 0x400, @device_b, 0x17}, @ext={{}, @device_a, 0x1, @device_a, 0x2a}, @not_ext={{}, @device_a, 0x9, "", 0x12}, @not_ext={{}, @broadcast, 0x331d, "", 0xf}, @not_ext={{}, @device_b, 0x8, "", 0x3f}, @not_ext={{}, @device_a, 0x5}, @not_ext={{}, @broadcast, 0x6, "", 0x20}, @ext={{}, @broadcast, 0x7, @device_a, 0x3b}, @not_ext={{}, @broadcast, 0x8d60ff4b, "", 0x2b}, @not_ext={{}, @device_a, 0x400, "", 0x38}]}}]}, @NL80211_ATTR_IE={0xbc, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0x100, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x9, 0x80}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @fast_bss_trans={0x37, 0x97, {0x5, 0x2, "d155b934634853c13695eaae09da06aa", "fb90fbacc3df32cc8444032d9a5789910e2ebda10ce75ca1be3ea0f3fd2fcb3e", "78f421f69982fde998c26815a5a5419145546f5a5a2b12a99592a08f1b9d8e1e", [{0x4, 0x21, "a3e69d8ad2060864f9444380f640ec872240095d34d1d0bb22ad4cded1421571df"}, {0x2, 0x20, "27521fe88c762a3b10d5408b3e40e8106adc287ff408c8d71e368883f0a9aeb3"}]}}]}, @NL80211_ATTR_IE={0x93, 0x2a, [@supported_rates={0x1, 0x5, [{0xc, 0x1}, {0x16}, {0x30, 0x1}, {0x48, 0x1}, {0x4}]}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x4, 0x0, {0x7, 0x1abf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x9, 0x8}}, @perr={0x84, 0x5c, {0x1, 0x6, [@not_ext={{}, @device_b, 0x0, "", 0x41}, @not_ext={{}, @device_b, 0x8000, "", 0x31}, @not_ext={{}, @device_a, 0xffffffe1, "", 0x3d}, @ext={{}, @device_a, 0xda, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x0, "", 0x26}, @ext={{}, @broadcast, 0x0, @device_a, 0x3c}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0xa1, 0x2a, [@measure_req={0x26, 0x85, {0x1, 0x20, 0x3, "8a0f97d00d601be565508f77cf8cc0e161d8cd1877eefd0198f4e76dc70b1388ebdbf6f2baef7420571b071234e69b5f408f6170ec50830cfae17733af356eaea95e7facdd20896823271b9ebd03a4305bf78e41fb13cbfb67269c7f38d625c051457d7eb2333485ef71f1bb803506329f90a73a363c7068ca23b6d5023127660d3b"}}, @mesh_chsw={0x76, 0x6, {0x6, 0x4, 0x28, 0x9}}, @mesh_chsw={0x76, 0x6, {0x8, 0x3, 0x16, 0x7f}}, @peer_mgmt={0x75, 0x4, {0x1, 0x81, @void, @void, @void}}]}, @NL80211_ATTR_IE={0x1f3, 0x2a, [@ssid={0x0, 0x14, @random="80119a6531716a4cf782cb08cbbecacda99eaad6"}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x0, 0x0, {0x257, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0xa9, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6e, 0x30, 0x2}}, @perr={0x84, 0x88, {0x46, 0x8, [@not_ext={{}, @broadcast, 0x3, "", 0x22}, @not_ext={{}, @device_b, 0x45, "", 0x38}, @ext={{}, @device_a, 0x8, @device_a, 0x37}, @ext={{}, @broadcast, 0xfffffff9, @device_b, 0x7}, @ext={{}, @broadcast, 0xdd, @device_a, 0x28}, @not_ext={{}, @broadcast, 0x4, "", 0x3}, @ext={{}, @broadcast, 0x6, @broadcast, 0x2d}, @ext={{}, @device_b, 0x61, @device_b, 0x27}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x8, 0x1, @device_b, 0x8c7, "", 0x20, 0x73}}, @random_vendor={0xdd, 0x7d, "0e65f1c8684a91987a38e0f623611132b22815e1b61cfb3dfa5a187d8c578eac23de32b71649d8f67036bf4ea3f3aa5405693f8f6abffc1b295cb118f600f704560fa8ad17e0ff498467c0647dbc5170bf9b2b0445ae78bbf705424cfb418aa4c63c79ea4137753cea6b495ec756750c72af4817229574f69b3167c8d1"}, @fast_bss_trans={0x37, 0x8b, {0xd8, 0x2, "a848e22b25f10a9749c50ec15c149bf1", "7d7fdea21901eeb92b6785533c160e39c87bb9dc55e824185024ac63151a546c", "596910f99acd838f546c1aa97d64ce84c0f0520058ec021706a21a0f81ff37bb", [{0x3, 0x10, "37610baf767f780bdbe58a0ba276255b"}, {0x2, 0x25, "5e8ba19920697fe0a7b78b465e23db3612f31e04a8bae12ea594837ce8186f04fbcf5711c8"}]}}]}, @NL80211_ATTR_IE={0x2b2, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @measure_req={0x26, 0x76, {0x0, 0x0, 0x5e, "8bbae6f60650c3ccd15dfda4e23e19a286c707e9de5e4ea5e82b0f2f253555a1422cd6a959a4c45dbff5e0380179d3413a5ea8c521ffbaa8a969c71ea9febe8797cc4b9a97ebc837dff879e40623900358a2708331fb0917f12450c5fecf7748405050cc4af2c22a17d6125a2fa9673b80971a"}}, @tim={0x5, 0xa0, {0x40, 0x3e, 0x5, "19f233ad89032f42c5632514636ad97cb5755964a8f8555a530d23700b082cf0b50139408527c8ccd89f3c1961a15d18aeabde350004ee98b1b5ec496d43c9c507e9a0c697bb469bbe2f1452abfff8bd99037c9e44b1244fa471bc96c39c3515ab0755871f15dd8f0eb0d8f8a666bc2142fffad096bc4ebcd50ef9f4b6e35f91d9cd5bb62d3288228d0d05d3757ed4ee8fdae0c2ef6c4b88ab3b0000e8"}}, @chsw_timing={0x68, 0x4, {0x3f, 0x100}}, @perr={0x84, 0xc8, {0x56, 0xc, [@ext={{}, @device_b, 0x0, @device_b, 0x17}, @ext={{}, @device_a, 0x2, @broadcast, 0x6}, @not_ext={{}, @device_b, 0xffff0000, "", 0x38}, @ext={{}, @device_a, 0xb27, @broadcast, 0x16}, @not_ext={{}, @broadcast, 0x1, "", 0x2c}, @ext={{}, @broadcast, 0x4, @device_b, 0x1a}, @not_ext={{}, @broadcast, 0x2, "", 0x1}, @not_ext={{}, @device_a, 0x10000, "", 0x15}, @ext={{}, @device_b, 0x1b29, @broadcast, 0x2c}, @ext={{}, @broadcast, 0x400, @broadcast, 0x3e}, @not_ext={{}, @device_b, 0x9ab4, "", 0x12}, @ext={{}, @broadcast, 0x2, @device_b, 0x1d}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb7, 0x4}}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x4, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x1, 0xaf27, 0x20}}, @measure_req={0x26, 0x8d, {0x3, 0x7f, 0x2, "5754c6e88f3554a08697dfe4b01fe5c01cd9e1af36dea3f342af16140618b11b3b20302463293ecdbd9b1fa586dd645756ba6ae63d0c1c5d6fe7cf1f27d1eda6f9f5d1ff584fadf09110d2a1f92e02f1bf3fca152c77b0c2a56a7669d8a68eb0e945ec21f57a32671eca0881842dcd4761fe471aa0bf99a4440edbb4ef744e2d5027ff99d5a5193c9cbe"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}]}, 0x994}, 0x1, 0x0, 0x0, 0x48000}, 0x28084010) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) 00:34:43 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2a9c1fff, 0x12, r1, 0x100000000) 00:34:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) [ 2724.643674][ T2907] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x994, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfbd, 0x8}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0x2bd, 0x2a, [@random={0x1, 0xf9, "32f31c7c95d1df6d662aa8862309085514597a2fb084ee4270fe2662bb577dba2af2619c3924fe53a5986c785522996496b4f8190b522acd2a221edeb39a10235099455ff9c8c35f87892d1b46b40be227862c1cce8fad409798c3049718e7c5a49336e221cb354eb7081806b839052636ab52c8347a04b57f13d02b7d1e2c02c3089379cf5493fecf6238d4c8f6ff80d9d77e4583321ac925e724f9f1f68b3d620659f522f181caccf39fa3cf29c447c181fe70555c7627a3305667e33e0fcc4167405bdc3d110ad676906a4f02b8687a123e9cb7d99ac1261418f9f2cbe5aac19603ff57bc085423cafe5e347f6cf2adaece9e2e1b8e2e25"}, @supported_rates={0x1, 0x6, [{0x1b}, {0x18, 0x1}, {0x4}, {0x5}, {0x6, 0x1}, {0xb, 0x1}]}, @random={0x2, 0x90, "bb9c0986c29e2afb859e8fd55a69e6e90c22ac2573190a178ef5e9d61a5f448c9f23aa81c15807adbde7eaa453a230255206895575f08069ea597b1748fdd03de5c348b78823e367deb444c0a75cfacae17c32a31c66e9c389b8135e6b4cc5708782b90e43dae2c8e60a334d407ea9726e0c7f42b6dab68aa00845531c8acc22b25aa5f1f2c4792970604efbdc7922ba"}, @mesh_chsw={0x76, 0x6, {0x3f, 0x6, 0x1b, 0xfff7}}, @gcr_ga={0xbd, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x4, 0x40, @device_b, 0x1200, 0xfffffffc, 0x42a}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0xaf, 0x70, 0x9, 0x2}}, @perr={0x84, 0xe3, {0x9, 0xf, [@not_ext={{}, @device_a, 0xfffffff8, "", 0x30}, @not_ext={{}, @device_b, 0x4d, "", 0x36}, @ext={{}, @device_b, 0x5, @device_b, 0x40}, @not_ext={{}, @device_a, 0xffffffff, "", 0x36}, @ext={{}, @device_a, 0x9, @device_b, 0x1e}, @ext={{}, @device_a, 0x400, @device_b, 0x17}, @ext={{}, @device_a, 0x1, @device_a, 0x2a}, @not_ext={{}, @device_a, 0x9, "", 0x12}, @not_ext={{}, @broadcast, 0x331d, "", 0xf}, @not_ext={{}, @device_b, 0x8, "", 0x3f}, @not_ext={{}, @device_a, 0x5}, @not_ext={{}, @broadcast, 0x6, "", 0x20}, @ext={{}, @broadcast, 0x7, @device_a, 0x3b}, @not_ext={{}, @broadcast, 0x8d60ff4b, "", 0x2b}, @not_ext={{}, @device_a, 0x400, "", 0x38}]}}]}, @NL80211_ATTR_IE={0xbc, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0x100, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x9, 0x80}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @fast_bss_trans={0x37, 0x97, {0x5, 0x2, "d155b934634853c13695eaae09da06aa", "fb90fbacc3df32cc8444032d9a5789910e2ebda10ce75ca1be3ea0f3fd2fcb3e", "78f421f69982fde998c26815a5a5419145546f5a5a2b12a99592a08f1b9d8e1e", [{0x4, 0x21, "a3e69d8ad2060864f9444380f640ec872240095d34d1d0bb22ad4cded1421571df"}, {0x2, 0x20, "27521fe88c762a3b10d5408b3e40e8106adc287ff408c8d71e368883f0a9aeb3"}]}}]}, @NL80211_ATTR_IE={0x93, 0x2a, [@supported_rates={0x1, 0x5, [{0xc, 0x1}, {0x16}, {0x30, 0x1}, {0x48, 0x1}, {0x4}]}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x4, 0x0, {0x7, 0x1abf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x9, 0x8}}, @perr={0x84, 0x5c, {0x1, 0x6, [@not_ext={{}, @device_b, 0x0, "", 0x41}, @not_ext={{}, @device_b, 0x8000, "", 0x31}, @not_ext={{}, @device_a, 0xffffffe1, "", 0x3d}, @ext={{}, @device_a, 0xda, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x0, "", 0x26}, @ext={{}, @broadcast, 0x0, @device_a, 0x3c}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0xa1, 0x2a, [@measure_req={0x26, 0x85, {0x1, 0x20, 0x3, "8a0f97d00d601be565508f77cf8cc0e161d8cd1877eefd0198f4e76dc70b1388ebdbf6f2baef7420571b071234e69b5f408f6170ec50830cfae17733af356eaea95e7facdd20896823271b9ebd03a4305bf78e41fb13cbfb67269c7f38d625c051457d7eb2333485ef71f1bb803506329f90a73a363c7068ca23b6d5023127660d3b"}}, @mesh_chsw={0x76, 0x6, {0x6, 0x4, 0x28, 0x9}}, @mesh_chsw={0x76, 0x6, {0x8, 0x3, 0x16, 0x7f}}, @peer_mgmt={0x75, 0x4, {0x1, 0x81, @void, @void, @void}}]}, @NL80211_ATTR_IE={0x1f3, 0x2a, [@ssid={0x0, 0x14, @random="80119a6531716a4cf782cb08cbbecacda99eaad6"}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x0, 0x0, {0x257, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0xa9, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6e, 0x30, 0x2}}, @perr={0x84, 0x88, {0x46, 0x8, [@not_ext={{}, @broadcast, 0x3, "", 0x22}, @not_ext={{}, @device_b, 0x45, "", 0x38}, @ext={{}, @device_a, 0x8, @device_a, 0x37}, @ext={{}, @broadcast, 0xfffffff9, @device_b, 0x7}, @ext={{}, @broadcast, 0xdd, @device_a, 0x28}, @not_ext={{}, @broadcast, 0x4, "", 0x3}, @ext={{}, @broadcast, 0x6, @broadcast, 0x2d}, @ext={{}, @device_b, 0x61, @device_b, 0x27}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x8, 0x1, @device_b, 0x8c7, "", 0x20, 0x73}}, @random_vendor={0xdd, 0x7d, "0e65f1c8684a91987a38e0f623611132b22815e1b61cfb3dfa5a187d8c578eac23de32b71649d8f67036bf4ea3f3aa5405693f8f6abffc1b295cb118f600f704560fa8ad17e0ff498467c0647dbc5170bf9b2b0445ae78bbf705424cfb418aa4c63c79ea4137753cea6b495ec756750c72af4817229574f69b3167c8d1"}, @fast_bss_trans={0x37, 0x8b, {0xd8, 0x2, "a848e22b25f10a9749c50ec15c149bf1", "7d7fdea21901eeb92b6785533c160e39c87bb9dc55e824185024ac63151a546c", "596910f99acd838f546c1aa97d64ce84c0f0520058ec021706a21a0f81ff37bb", [{0x3, 0x10, "37610baf767f780bdbe58a0ba276255b"}, {0x2, 0x25, "5e8ba19920697fe0a7b78b465e23db3612f31e04a8bae12ea594837ce8186f04fbcf5711c8"}]}}]}, @NL80211_ATTR_IE={0x2b2, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @measure_req={0x26, 0x76, {0x0, 0x0, 0x5e, "8bbae6f60650c3ccd15dfda4e23e19a286c707e9de5e4ea5e82b0f2f253555a1422cd6a959a4c45dbff5e0380179d3413a5ea8c521ffbaa8a969c71ea9febe8797cc4b9a97ebc837dff879e40623900358a2708331fb0917f12450c5fecf7748405050cc4af2c22a17d6125a2fa9673b80971a"}}, @tim={0x5, 0xa0, {0x40, 0x3e, 0x5, "19f233ad89032f42c5632514636ad97cb5755964a8f8555a530d23700b082cf0b50139408527c8ccd89f3c1961a15d18aeabde350004ee98b1b5ec496d43c9c507e9a0c697bb469bbe2f1452abfff8bd99037c9e44b1244fa471bc96c39c3515ab0755871f15dd8f0eb0d8f8a666bc2142fffad096bc4ebcd50ef9f4b6e35f91d9cd5bb62d3288228d0d05d3757ed4ee8fdae0c2ef6c4b88ab3b0000e8"}}, @chsw_timing={0x68, 0x4, {0x3f, 0x100}}, @perr={0x84, 0xc8, {0x56, 0xc, [@ext={{}, @device_b, 0x0, @device_b, 0x17}, @ext={{}, @device_a, 0x2, @broadcast, 0x6}, @not_ext={{}, @device_b, 0xffff0000, "", 0x38}, @ext={{}, @device_a, 0xb27, @broadcast, 0x16}, @not_ext={{}, @broadcast, 0x1, "", 0x2c}, @ext={{}, @broadcast, 0x4, @device_b, 0x1a}, @not_ext={{}, @broadcast, 0x2, "", 0x1}, @not_ext={{}, @device_a, 0x10000, "", 0x15}, @ext={{}, @device_b, 0x1b29, @broadcast, 0x2c}, @ext={{}, @broadcast, 0x400, @broadcast, 0x3e}, @not_ext={{}, @device_b, 0x9ab4, "", 0x12}, @ext={{}, @broadcast, 0x2, @device_b, 0x1d}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb7, 0x4}}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x4, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x1, 0xaf27, 0x20}}, @measure_req={0x26, 0x8d, {0x3, 0x7f, 0x2, "5754c6e88f3554a08697dfe4b01fe5c01cd9e1af36dea3f342af16140618b11b3b20302463293ecdbd9b1fa586dd645756ba6ae63d0c1c5d6fe7cf1f27d1eda6f9f5d1ff584fadf09110d2a1f92e02f1bf3fca152c77b0c2a56a7669d8a68eb0e945ec21f57a32671eca0881842dcd4761fe471aa0bf99a4440edbb4ef744e2d5027ff99d5a5193c9cbe"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}]}, 0x994}, 0x1, 0x0, 0x0, 0x48000}, 0x28084010) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) [ 2724.695361][ T2909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:34:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2ace0200, 0x12, r1, 0x100000000) 00:34:45 executing program 3: r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) (async) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) (async) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) (async) unshare(0x6c060000) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xf, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x7, 0x0, 0x7ff, 0x80000001, 0x7, 0x10001, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 00:34:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getflags(r0, 0x401) (async) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x0, "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"}) 00:34:45 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x66}, 0x48000) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x6}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f0000000540)=""/139, 0x8b}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x9}, 0x13) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b98efff, 0x12, r1, 0x100000000) 00:34:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) r2 = fcntl$getown(0xffffffffffffffff, 0x9) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x994, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfbd, 0x8}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0x2bd, 0x2a, [@random={0x1, 0xf9, "32f31c7c95d1df6d662aa8862309085514597a2fb084ee4270fe2662bb577dba2af2619c3924fe53a5986c785522996496b4f8190b522acd2a221edeb39a10235099455ff9c8c35f87892d1b46b40be227862c1cce8fad409798c3049718e7c5a49336e221cb354eb7081806b839052636ab52c8347a04b57f13d02b7d1e2c02c3089379cf5493fecf6238d4c8f6ff80d9d77e4583321ac925e724f9f1f68b3d620659f522f181caccf39fa3cf29c447c181fe70555c7627a3305667e33e0fcc4167405bdc3d110ad676906a4f02b8687a123e9cb7d99ac1261418f9f2cbe5aac19603ff57bc085423cafe5e347f6cf2adaece9e2e1b8e2e25"}, @supported_rates={0x1, 0x6, [{0x1b}, {0x18, 0x1}, {0x4}, {0x5}, {0x6, 0x1}, {0xb, 0x1}]}, @random={0x2, 0x90, "bb9c0986c29e2afb859e8fd55a69e6e90c22ac2573190a178ef5e9d61a5f448c9f23aa81c15807adbde7eaa453a230255206895575f08069ea597b1748fdd03de5c348b78823e367deb444c0a75cfacae17c32a31c66e9c389b8135e6b4cc5708782b90e43dae2c8e60a334d407ea9726e0c7f42b6dab68aa00845531c8acc22b25aa5f1f2c4792970604efbdc7922ba"}, @mesh_chsw={0x76, 0x6, {0x3f, 0x6, 0x1b, 0xfff7}}, @gcr_ga={0xbd, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x4, 0x40, @device_b, 0x1200, 0xfffffffc, 0x42a}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0xaf, 0x70, 0x9, 0x2}}, @perr={0x84, 0xe3, {0x9, 0xf, [@not_ext={{}, @device_a, 0xfffffff8, "", 0x30}, @not_ext={{}, @device_b, 0x4d, "", 0x36}, @ext={{}, @device_b, 0x5, @device_b, 0x40}, @not_ext={{}, @device_a, 0xffffffff, "", 0x36}, @ext={{}, @device_a, 0x9, @device_b, 0x1e}, @ext={{}, @device_a, 0x400, @device_b, 0x17}, @ext={{}, @device_a, 0x1, @device_a, 0x2a}, @not_ext={{}, @device_a, 0x9, "", 0x12}, @not_ext={{}, @broadcast, 0x331d, "", 0xf}, @not_ext={{}, @device_b, 0x8, "", 0x3f}, @not_ext={{}, @device_a, 0x5}, @not_ext={{}, @broadcast, 0x6, "", 0x20}, @ext={{}, @broadcast, 0x7, @device_a, 0x3b}, @not_ext={{}, @broadcast, 0x8d60ff4b, "", 0x2b}, @not_ext={{}, @device_a, 0x400, "", 0x38}]}}]}, @NL80211_ATTR_IE={0xbc, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0x100, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x9, 0x80}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @fast_bss_trans={0x37, 0x97, {0x5, 0x2, "d155b934634853c13695eaae09da06aa", "fb90fbacc3df32cc8444032d9a5789910e2ebda10ce75ca1be3ea0f3fd2fcb3e", "78f421f69982fde998c26815a5a5419145546f5a5a2b12a99592a08f1b9d8e1e", [{0x4, 0x21, "a3e69d8ad2060864f9444380f640ec872240095d34d1d0bb22ad4cded1421571df"}, {0x2, 0x20, "27521fe88c762a3b10d5408b3e40e8106adc287ff408c8d71e368883f0a9aeb3"}]}}]}, @NL80211_ATTR_IE={0x93, 0x2a, [@supported_rates={0x1, 0x5, [{0xc, 0x1}, {0x16}, {0x30, 0x1}, {0x48, 0x1}, {0x4}]}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x4, 0x0, {0x7, 0x1abf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x9, 0x8}}, @perr={0x84, 0x5c, {0x1, 0x6, [@not_ext={{}, @device_b, 0x0, "", 0x41}, @not_ext={{}, @device_b, 0x8000, "", 0x31}, @not_ext={{}, @device_a, 0xffffffe1, "", 0x3d}, @ext={{}, @device_a, 0xda, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x0, "", 0x26}, @ext={{}, @broadcast, 0x0, @device_a, 0x3c}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0xa1, 0x2a, [@measure_req={0x26, 0x85, {0x1, 0x20, 0x3, "8a0f97d00d601be565508f77cf8cc0e161d8cd1877eefd0198f4e76dc70b1388ebdbf6f2baef7420571b071234e69b5f408f6170ec50830cfae17733af356eaea95e7facdd20896823271b9ebd03a4305bf78e41fb13cbfb67269c7f38d625c051457d7eb2333485ef71f1bb803506329f90a73a363c7068ca23b6d5023127660d3b"}}, @mesh_chsw={0x76, 0x6, {0x6, 0x4, 0x28, 0x9}}, @mesh_chsw={0x76, 0x6, {0x8, 0x3, 0x16, 0x7f}}, @peer_mgmt={0x75, 0x4, {0x1, 0x81, @void, @void, @void}}]}, @NL80211_ATTR_IE={0x1f3, 0x2a, [@ssid={0x0, 0x14, @random="80119a6531716a4cf782cb08cbbecacda99eaad6"}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x0, 0x0, {0x257, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0xa9, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6e, 0x30, 0x2}}, @perr={0x84, 0x88, {0x46, 0x8, [@not_ext={{}, @broadcast, 0x3, "", 0x22}, @not_ext={{}, @device_b, 0x45, "", 0x38}, @ext={{}, @device_a, 0x8, @device_a, 0x37}, @ext={{}, @broadcast, 0xfffffff9, @device_b, 0x7}, @ext={{}, @broadcast, 0xdd, @device_a, 0x28}, @not_ext={{}, @broadcast, 0x4, "", 0x3}, @ext={{}, @broadcast, 0x6, @broadcast, 0x2d}, @ext={{}, @device_b, 0x61, @device_b, 0x27}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x8, 0x1, @device_b, 0x8c7, "", 0x20, 0x73}}, @random_vendor={0xdd, 0x7d, "0e65f1c8684a91987a38e0f623611132b22815e1b61cfb3dfa5a187d8c578eac23de32b71649d8f67036bf4ea3f3aa5405693f8f6abffc1b295cb118f600f704560fa8ad17e0ff498467c0647dbc5170bf9b2b0445ae78bbf705424cfb418aa4c63c79ea4137753cea6b495ec756750c72af4817229574f69b3167c8d1"}, @fast_bss_trans={0x37, 0x8b, {0xd8, 0x2, "a848e22b25f10a9749c50ec15c149bf1", "7d7fdea21901eeb92b6785533c160e39c87bb9dc55e824185024ac63151a546c", "596910f99acd838f546c1aa97d64ce84c0f0520058ec021706a21a0f81ff37bb", [{0x3, 0x10, "37610baf767f780bdbe58a0ba276255b"}, {0x2, 0x25, "5e8ba19920697fe0a7b78b465e23db3612f31e04a8bae12ea594837ce8186f04fbcf5711c8"}]}}]}, @NL80211_ATTR_IE={0x2b2, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @measure_req={0x26, 0x76, {0x0, 0x0, 0x5e, "8bbae6f60650c3ccd15dfda4e23e19a286c707e9de5e4ea5e82b0f2f253555a1422cd6a959a4c45dbff5e0380179d3413a5ea8c521ffbaa8a969c71ea9febe8797cc4b9a97ebc837dff879e40623900358a2708331fb0917f12450c5fecf7748405050cc4af2c22a17d6125a2fa9673b80971a"}}, @tim={0x5, 0xa0, {0x40, 0x3e, 0x5, "19f233ad89032f42c5632514636ad97cb5755964a8f8555a530d23700b082cf0b50139408527c8ccd89f3c1961a15d18aeabde350004ee98b1b5ec496d43c9c507e9a0c697bb469bbe2f1452abfff8bd99037c9e44b1244fa471bc96c39c3515ab0755871f15dd8f0eb0d8f8a666bc2142fffad096bc4ebcd50ef9f4b6e35f91d9cd5bb62d3288228d0d05d3757ed4ee8fdae0c2ef6c4b88ab3b0000e8"}}, @chsw_timing={0x68, 0x4, {0x3f, 0x100}}, @perr={0x84, 0xc8, {0x56, 0xc, [@ext={{}, @device_b, 0x0, @device_b, 0x17}, @ext={{}, @device_a, 0x2, @broadcast, 0x6}, @not_ext={{}, @device_b, 0xffff0000, "", 0x38}, @ext={{}, @device_a, 0xb27, @broadcast, 0x16}, @not_ext={{}, @broadcast, 0x1, "", 0x2c}, @ext={{}, @broadcast, 0x4, @device_b, 0x1a}, @not_ext={{}, @broadcast, 0x2, "", 0x1}, @not_ext={{}, @device_a, 0x10000, "", 0x15}, @ext={{}, @device_b, 0x1b29, @broadcast, 0x2c}, @ext={{}, @broadcast, 0x400, @broadcast, 0x3e}, @not_ext={{}, @device_b, 0x9ab4, "", 0x12}, @ext={{}, @broadcast, 0x2, @device_b, 0x1d}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb7, 0x4}}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x4, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x1, 0xaf27, 0x20}}, @measure_req={0x26, 0x8d, {0x3, 0x7f, 0x2, "5754c6e88f3554a08697dfe4b01fe5c01cd9e1af36dea3f342af16140618b11b3b20302463293ecdbd9b1fa586dd645756ba6ae63d0c1c5d6fe7cf1f27d1eda6f9f5d1ff584fadf09110d2a1f92e02f1bf3fca152c77b0c2a56a7669d8a68eb0e945ec21f57a32671eca0881842dcd4761fe471aa0bf99a4440edbb4ef744e2d5027ff99d5a5193c9cbe"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}]}, 0x994}, 0x1, 0x0, 0x0, 0x48000}, 0x28084010) (async) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) 00:34:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2ce2afff, 0x12, r1, 0x100000000) [ 2726.937744][ T3259] misc userio: No port type given on /dev/userio [ 2726.969240][ T3316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:34:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0xfffffffeffffffff, 0x10000, 0x3f, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x101102, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f0000000300)) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) preadv2(r4, &(0x7f0000000200), 0x0, 0x6ba2, 0x7, 0x3) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[0x8001, 0x4, 0x0, 0x1, 0x1ff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) 00:34:46 executing program 2: bind(0xffffffffffffffff, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x3d}, 0x80) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)=0x2) 00:34:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2d2acfff, 0x12, r1, 0x100000000) 00:34:46 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x66}, 0x48000) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x6}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f0000000540)=""/139, 0x8b}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x9}, 0x13) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000280)={0x0, @motion_det}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x2a69, "de8d67520c8310708030c88ce744e9378fc37e20cd20cb855c65520f90d5c4d3", 0x1, 0x100, 0xe5f6, 0xeae, 0x4, 0x1, 0x9, 0x4}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x98f905, 0xe7ff}) 00:34:46 executing program 2: bind(0xffffffffffffffff, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x3d}, 0x80) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)=0x2) bind(0xffffffffffffffff, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x3d}, 0x80) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x4000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) pipe(&(0x7f0000000040)) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)=0x2) (async) 00:34:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2dbd0100, 0x12, r1, 0x100000000) 00:34:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0xfffffffeffffffff, 0x10000, 0x3f, 0xb0b0b0b0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x101102, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f0000000300)) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) preadv2(r4, &(0x7f0000000200), 0x0, 0x6ba2, 0x7, 0x3) (async) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[0x8001, 0x4, 0x0, 0x1, 0x1ff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async, rerun: 64) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) 00:34:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2e530fff, 0x12, r1, 0x100000000) 00:34:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0xfffffffeffffffff, 0x10000, 0x3f, 0xb0b0b0b0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81, 0x0, 0x0}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x101102, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f0000000300)) (async) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) preadv2(r4, &(0x7f0000000200), 0x0, 0x6ba2, 0x7, 0x3) (async) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[0x8001, 0x4, 0x0, 0x1, 0x1ff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) 00:34:46 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x66}, 0x48000) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x6}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f0000000540)=""/139, 0x8b}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x9}, 0x13) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x66}, 0x48000) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x6}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f0000000540)=""/139, 0x8b}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x9}, 0x13) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000280)={0x0, @motion_det}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x2a69, "de8d67520c8310708030c88ce744e9378fc37e20cd20cb855c65520f90d5c4d3", 0x1, 0x100, 0xe5f6, 0xeae, 0x4, 0x1, 0x9, 0x4}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x98f905, 0xe7ff}) 00:34:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2ed79fff, 0x12, r1, 0x100000000) 00:34:46 executing program 2: bind(0xffffffffffffffff, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x3d}, 0x80) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)=0x2) 00:34:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0xffff, 0x4, 0x401}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2727.520958][ T3947] misc userio: No port type given on /dev/userio 00:34:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0xffff, 0x4, 0x401}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2f310700, 0x12, r1, 0x100000000) 00:34:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:46 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/180, 0xb4}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844c}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000280)={0x0, @motion_det}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x2a69, "de8d67520c8310708030c88ce744e9378fc37e20cd20cb855c65520f90d5c4d3", 0x1, 0x100, 0xe5f6, 0xeae, 0x4, 0x1, 0x9, 0x4}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x98f905, 0xe7ff}) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000280)={0x0, @motion_det}) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x2a69, "de8d67520c8310708030c88ce744e9378fc37e20cd20cb855c65520f90d5c4d3", 0x1, 0x100, 0xe5f6, 0xeae, 0x4, 0x1, 0x9, 0x4}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x98f905, 0xe7ff}) (async) 00:34:46 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x8, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r2, 0x100000000) 00:34:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0xffff, 0x4, 0x401}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0xffff, 0x4, 0x401}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:34:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x30970700, 0x12, r1, 0x100000000) 00:34:46 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x8, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r2, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x8, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r2, 0x100000000) (async) 00:34:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) [ 2727.876399][ T4297] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x30e50200, 0x12, r1, 0x100000000) 00:34:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x93db, 0x1bf300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x200, 0x8, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x4a0000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x200, 0xc5c5, 0x80003f}) 00:34:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x313f0200, 0x12, r1, 0x100000000) 00:34:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = getpid() pidfd_open(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, &(0x7f0000000100)) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x4, 0x10001}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 00:34:47 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/180, 0xb4}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844c}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/180, 0xb4}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844c}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x93db, 0x1bf300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x200, 0x8, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x4a0000) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x200, 0xc5c5, 0x80003f}) 00:34:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:47 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x8, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r2, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x8, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r2, 0x100000000) (async) 00:34:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x93db, 0x1bf300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x200, 0x8, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x4a0000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x200, 0xc5c5, 0x80003f}) 00:34:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31d50700, 0x12, r1, 0x100000000) 00:34:47 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:47 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2728.280918][ T4662] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:47 executing program 1: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:47 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1f, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0xb4d, 0x9, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x35100400, 0x12, r1, 0x100000000) 00:34:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = getpid() pidfd_open(r3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, &(0x7f0000000100)) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x4, 0x10001}) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 00:34:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) 00:34:47 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:47 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1f, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0xb4d, 0x9, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1f, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0xb4d, 0x9, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:34:47 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async, rerun: 32) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) (rerun: 32) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) (rerun: 64) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/180, 0xb4}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844c}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async, rerun: 64) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x36620200, 0x12, r1, 0x100000000) 00:34:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) 00:34:47 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x37f50700, 0x12, r1, 0x100000000) 00:34:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) (async) 00:34:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x38b80700, 0x12, r1, 0x100000000) 00:34:48 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = getpid() pidfd_open(r3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, &(0x7f0000000100)) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x4, 0x10001}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 00:34:48 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1f, 0xf, 0x82, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0xb4d, 0x9, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:48 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0), 0x0, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x40082}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3b990700, 0x12, r1, 0x100000000) 00:34:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3f000000, 0x12, r1, 0x100000000) 00:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x40082}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x40082}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) [ 2729.208999][ T5290] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x5, 0x81c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x40082}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x402fafff, 0x12, r1, 0x100000000) 00:34:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x35100400, 0x12, r1, 0x100000000) 00:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x7, 0x7, 0x7, 0x0, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x3e, 0x400, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x8, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x5, 0x81c}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0), 0x0, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0), 0x0, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40330200, 0x12, r1, 0x100000000) [ 2729.643664][ T5622] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x7, 0x7, 0x7, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x3e, 0x400, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x8, 0x7}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40727fff, 0x12, r1, 0x100000000) 00:34:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) readv(r2, &(0x7f0000001bc0)=[{&(0x7f0000001540)=""/187, 0xbb}, {0x0}, {&(0x7f0000001800)=""/229, 0xe5}, {&(0x7f0000001900)=""/222, 0xde}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/47, 0x2f}, {&(0x7f0000001ac0)=""/201, 0xc9}], 0x7) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x4, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) dup(0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xf00, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) 00:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x7, 0x7, 0x7, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x3e, 0x400, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x8, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x5, 0x81c}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40e60100, 0x12, r1, 0x100000000) 00:34:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:49 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0), 0x0, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0xdd64, 0x5, 0x80000000, 0x0, 0x3, 0x0, 0xdca3, 0x8, 0x1ff], 0xa, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) 00:34:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x41035fff, 0x12, r1, 0x100000000) 00:34:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0xdd64, 0x5, 0x80000000, 0x0, 0x3, 0x0, 0xdca3, 0x8, 0x1ff], 0xa, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0xdd64, 0x5, 0x80000000, 0x0, 0x3, 0x0, 0xdca3, 0x8, 0x1ff], 0xa}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) (async) 00:34:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x46b70100, 0x12, r1, 0x100000000) 00:34:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async, rerun: 32) readv(r2, &(0x7f0000001bc0)=[{&(0x7f0000001540)=""/187, 0xbb}, {0x0}, {&(0x7f0000001800)=""/229, 0xe5}, {&(0x7f0000001900)=""/222, 0xde}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/47, 0x2f}, {&(0x7f0000001ac0)=""/201, 0xc9}], 0x7) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x4, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) dup(0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xf00, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) 00:34:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:49 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x47800700, 0x12, r1, 0x100000000) 00:34:49 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x198, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "f81b0e0f91186f77c349bf53e3724b5d485942761d3da8fdc3896b47ced4be02ae9c117345330ba17a5046f5d258b72590de3d2baf029be1b3b763cf813cf2b9229eeca2df3f508bad9587e15d5bbff509ab0d2819d534c552575ae773ca9de3582efe6469808d6638b1279e29020b25cb6f7ab6ebe07df6747cf99d5bb9bcec53ad164e6d24cce4ecdee2b83fcfadfb82fbf90dab020608d9e16c4762cab6864e0c10007799cf9d06cf0a81ebd900eb2972"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6937049edc4696bac0356edf8ed344210623cc1b3b0febc3011cb83657"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "821ff6b90d2f3b80817c2b3af54cf4197f05ea5f4fc83f6dbbb616ee"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20040014}, 0x4400) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r4 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:49 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x100) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) [ 2730.295305][ T6181] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0xdd64, 0x5, 0x80000000, 0x0, 0x3, 0x0, 0xdca3, 0x8, 0x1ff], 0xa, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0xdd64, 0x5, 0x80000000, 0x0, 0x3, 0x0, 0xdca3, 0x8, 0x1ff], 0xa}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) (async) 00:34:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x48e00700, 0x12, r1, 0x100000000) 00:34:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) readv(r2, &(0x7f0000001bc0)=[{&(0x7f0000001540)=""/187, 0xbb}, {0x0}, {&(0x7f0000001800)=""/229, 0xe5}, {&(0x7f0000001900)=""/222, 0xde}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/47, 0x2f}, {&(0x7f0000001ac0)=""/201, 0xc9}], 0x7) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x4, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) dup(0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"571eb1200051f2c2192e49c72e5729e528beb972ec2419123b539a6c69a21b5fa6abf266df89fd2888a1d4517f44efd1d0c1561b3008154c7d1ee62aa01c21a08a9e057cc1e94ca5aa525c6473fa3a5954c9ab6107e4b315124106ce107f20ca73403c0964a4f588f1b966979ad5f0ad1a9b489e37ad01a3179585c3e07e4333c27667b5016e00d907540f36dcaca50303ff1311adb6eab819f0417fe3de3dc782fc43d2dd10171c340e428ce2c56c4ed1d5a6b76d5b6e4def639ad5a9395be37db8bed701cec1233558cdba6e57f6b3825752ab63ab796b7b3e0df9b0399e9f24c1d5b6c5146d1a43a931db2a35f5b08e045529269ee655bae6beed86a75bd7324c9688501b425a1ddc6e7e6c3eb684fc09ff2fa918fb5175535f0704affc90f27b65eab1bdab2cea1acddca6f98387afa12f40a7037b23cb4d270941fdbfd7d4cb20e0f50af89a7ac44f292697bb3c3ac77cb8c57755644a41d70a463de5b2242b3ce0a9698a1578d050a700c3ddc82fb4a7709e8a274e5e74e279d82675e6faab5f7202c7d12805435fb3bccfcc6d07b12e89f5abf2c64ee9646b14abece06f2c746fde17c597733a1b257976a5a1905574468d9e7d9d80b0178fcb1e684c41887f89c8398a0d4d5b22129b7bac7e81e6bc239a30724c5479239998501849ae9b23383f3f01568e354c5248a02493d7d9a99705448741b58a9da10da528586e0b4d4768851ad90379e1d2cc81255888e343971656706d30bb2c0821c9d2ec051c3edbaa9058c8cf2f1d4fb044e0ecbc7727d921207492fab36d6378bd7c318e9aafaa69fe6987f4335ad63e3f5aeb673390d9804eeb37cd3c332cc8de70125bebe87c09b83a6f939308056270220d71de9d2904c27bc568133db9491c228473211a87fa9cb2b0f033c562bec8f846a851c6907a17134e46ec6dffd0dd6f560b0d2ef07242519c18ab4ed8654e0540aa1b8d7b53912dd7d879082ca5994118e2cc5fd9eb82276f57e748b164bccb82e78a26b637c9dda2a2d31e0290deae6ef4e99bbd929a0a79a064b000463d541c49c2acd1ee2af81a47d0b430318567a68f1bac87a71d60bc50f7167f6679f3f92d14c2baa2d6d3093d9d4e8a0b2764a31046bb4566d779a5c5fe759a60187d544458c8a18623fcd307dc29ce884ee404ae912deded8e3ab73c2b8e98986d6e0b35e4c4d6494f54236eb320e17d9a178c37fdbbe0f4c2a809143cbba06a7e626c1c5b1b91940409b0c2f29a0cb55f001488d7c84ee7b0ee66e036efe3b3cda3d226a361c28a75c07efe173d07607d9fcc12c831bc9a73b18e13961594978b1aaa1e88c6f468c8a69bdef0b694154a01296be7fb37e5dea6a5a8292008ef826170cc893cfd6313d186e3396021d8daa3c62d46fc287e09f1e3e60287dad25c4cb620237291698461596205cfc4ab321ec349be318ae8b4c16b5462f62da6d727f8fc0461392625bae16c6787e29ecfc63582ac9e8bf42de420655fafe905b7a5e58acc6a5576d823ce1fe8970deb79622cef679007e1887a8a09532f726eace2bcde5728323175d0f042dacc9c3ec1c5dd16832b2c5b6429589c5085ed62a3f39f707b94d1376430d9c44144dd6a3c6b68895a37c522edccd9e0df424b51954bbd8bb0b0ea6e5b43e9194d9967a130fe326dd54dcbc1f3fdb4b158ee7c46ba680600a2a1b20a85ab7fca47c2dd72079d75960704cfaca237392ee6f61804375873070810fff960a30fb9e5e26a241207d591e710379a16c3c1baa99c1fead0214b17f4d67740925737cf540257b741b358c44e13e5d3ba207a04b0dd3513b173c9dfd63a851b158c99e45d8f9bc7e7ef0ac45bdd4cbc4d9411c8b519eb9f6a51adbfa863d654d2cf87f4836240c8b4259acf268afcf08151c432cfe8de4b3f95acee9c397f31daa2c15bbd8361f8d65372d78adfcf50923121e8595a331631bbf2f2d93ece032e6d66f6eada9114c64703e52bc0fba9b00af5d73adba4f5e791afc051fcbee91ec1d3b509adca9a3699f94eb99d9e79a9137f14a8e632d4103b341731ac961a16166c68d2396b165e47a003bc829574b38fbfbb86e72d5cd574b9d1b19999d3b653fa2cc9f3ab78054ce14ad057f7b0e8c78345a8c99637c8e42d78f3aa9bac5a94c1d9f7b0fc9c899d331349b070ebf1206bcde5e89ae2d2ecd2e08a427bae7a55fe6abb45f28015dbdeb0da0d1f63c2bb34c205657e1e2958bc93015941608ed4774b29d7f1c642307ef3bcd1e1df46b5b68a7b5d349c146b45bd42b7f38051dab4c9029494106a03de6a20262233f345f72452eb2a381fce4f7638c405f40a739e896f3cf802dc673d9f916433fbe74fd3c6a6d3e048baacd1d04f8136d3cd7e29de6f48c71d581481175159de4664a9ca27e57b1c777df2775177ecce1449995559e14424f499ed52b7425d08fa446eb2bceebf9b0f09fdb81b988dbafaa48c5300ff635269c73dfe140877bb87a08f33d96e154541c3c2d891fbbac653f4d1e0d1df0f6ac636fa5103c6be6b8eaa0f451ac773f7b705909dd5b5fbbbf69670ebb290c25ba27f4782d9e55aef1ee6b484e561d44a2ad888e3e7c1da078007d1741aa56f8a9125ffe9a3a438f35723508e21e748c1c1e78d4872ca331174377d850a8cd21576506c3094d1278bada0ccdf65a637a7458333e2b5a4a54237bf8d2954b3eeb312272993aa54858153891c3c54a25bdb63538926e60367b905cb6e445628e69c956e557bf75b4b72b82591b1f9c74d9407b304021d50d18ab8e9250487aa4774f2caefc90230473c61466a82afb4155a56af8cdf2cf611613768aa659c967fd462570de2e4dc93376a049a638edca45939fb76fe4f11c660da4874453d8738b07cdbbc11922e9a336f6773e689b712e47a026b1282af5cd982a516771754338a55ffa59459584a706e85562c719abd1e3117391934727f2ea572e0e14ed90c4c4f76b9d2b33fb98af0478a171de33ca753755377dd4d40e54debe52986d2e4e54a5e1aa092223a1e0394a24b6af227b5e762224cbad74dd606039f369aaa98b7bc2162e4bcc3c40905f3f4502fba320cdc6ae4bd940495e60f270068652b93221d94d27de3b7e546ffbb81f8bfb45d83b000b313bdaf4ecbc492d95ab38d5b5dfe0a916f224372047dfde14a5773d47f93c11a6602c7363c47d4e5f4f1ebac1737bded2b7091290c48873b710b7077c88e0e28de3265136704e92e78d3d6a4c1b14d7c8e4fa9ef0dc483129b2bb9a3af2d6e530e887ffdae7d09bccdc7cddb067d68552354e0b7571df157d266d6f0439453b7c12ce7124515fbd9572bd5ec27e66f154e21ab2e06ce35a5b94f631f4e0f124f4bce6e050d7ec1275bf62c4e03dd4ec7563e9cb9ce8f5c3100f1fac99ceadbfcf0558edd30b5747f54dc2d4ec9342fe5fc3114c66bbcba8785976ef4c29045044aa597ca4410d7680ef69e45c332db548762cdf7ed0a5fb62250adec5509abdd444717c9597d7d418c8592c9d3d31d3048e4e53afc6c90713e00eb35a1e132ed4614c886aac40b2735fe4527e6a7bd54c5ba884889c5631139964dc70f6bc0e4d32ed74a2ed8b7cb9299f20d0c36e48a1f397ed8cb8c969b2740206aab75b65099de2033a8f7ea889a46722d957a1d38553fcfbb5ef5e88b6c81dd2831b60a4881196642eebfc856f468e6aa529aa1369b9dc01f7d49b05e6734d02f26225d6d655fe80c084e437ae34088149b29cc23e17968a17474f2a8b0130911c90549604a059a753b74a6d4485425851f9b906f5648a0ff4cb60ba0f1ee994c7fe16e48196fb0426cdd9d9bd65ea4ba44394a18b7895f22ba8b9bee85f132459839855331d5a2b344d8ef893df4349337b3244c6f678235cded1fc9ab7fac47b136f669eb1f31bb40ff0bc70ce999a2f2c24316aa0ad8d18c9db85b57f0315103508b7be8c9506f57b0c6cb76642a6fe4a43d3ec78b131e4aea5ab08b46f676bd0deaf748cf87499c5d66f04eb59b7e69b6062573dd5125b1a6d835df0e1bf1c05694833b1d750b0333dadc7c572ef55feea335b91342738b75fb396265dfae3961c37f6801b02723667829323ed891e0749febbd0e4ef6d08c61dfa59ce43841097ddaac6176171f7d31c0707eee0f8f315b6cb52bbcf1932ccc783b1f4469197353529c3d5be514478f62ccc7dac132eef6bc6ac59db711a18356eb397df2ca578995e6268f6ca17cb3f7e5b23f3523e600db91cd8f7142a109f07a37bed17d12b015a1fd45b2eb426d74a6d9cd767ce11cf39b00e59d78fb87915e7ade5c3237c78ebb41d41ce26305c651f536f484dfa413deb5c03d79b666e81b24517f798f818285de546d9bc82be6361d10ca4adb3e32dc2d0984b62ccfa5f139ea3d5f9ba44d393c64fbe9bccd0d33243501997eaa5a3dc465fed067441372c91e3e6020d37664905d714b43408dd35572ece41eebe3b8e6d97bb3ba029f6952a9840797c438c9dd42f7edbb15fb2517c979b35f42d3197b1cd50c07089d424da720c59979dc851b6daab15b83c0e121ca9603baa9eeef5d5cd82fc4a6f6969cf601e48f5c5c1b53d1a606541b6697744e181c967a6b0f4fc803e09324640aeec3083b6c474ae02c43cbe5e9765244a0bdde6d0e82065d42fc9169f6e25f6340254d57ea2a36624c42517b15965df0033522957c4f7f181a638fa77d528ab8833bce2e0a33d6e980680515693fa3dc50b788339ddbf0e90714225abb92d766e365c201404429510ee94a84c2f3db8e8bdcdd00a3b14e57110ef099a21825fe6476395225fa93238e33bcae9633bb789c3803e29e5e9a0178afa85ba6f3ccd3cacb30f9ce1534b2403075d919ab505505d0123a0dbc38161b03f49dc5f0f40940098ad048e27df08f872009e6e385f57042070f69cf32efc88ef820ac95e526c1cf03f7c73a12efa084803fa7edd8356f2ed775837a196a6a49a2336734c1027bac9022997127cc8666e781115494e3f9fe523a96d9fc759d1dd6f8b161b1718809d651c0601f44b92811d8f858af263e01573c4ea794fb000354f3ff6c81976df6ff7a1f1236a5a786040b5b74373cf7b95fb52ee5c4a478f2aba61f59badb9a22359be3b37dee2ebaff64c83038b0345ae2a31d33e02936ac62450b5352566ce70f14c7316d8f2c2ef0539e68691a3459fb18f739d849e3cbac72157e4fdfca1bb2936321e37956e54b71878d2ae9e494150b3700f262bbc4e6a2a9be9d8a3f422faede5bf6747a16edb16bd324193f42a3087ba21f42558d58874dfa564f14afa327e2e034c34d39da3b6139683b99adb421e3aaf2f8c81c383b4147572adef3356e39bb44f7ad61375d48635ad8ccf560ef646c8ba2e95b72ee8aaf96e18a19c4ebb3735e17e348cf327b7242d23b1e0d91faae507ca09157d67eefef4c1c3fe5e798aac2e8cda609a80e6604f6e6861295f58a21856dab679830bf7f260000f5ccfd79c6f0e744d8941d719d5b99788f441ee910c0ebc023f646289478d681b1cccd54962c6c882777dc6943568c8f7d8b64464988f3bbd66ea52921ec560387054bcd2259b2e8e115b2b95b9f97524f4f6f540beb8e784007035ef30d4fa69556506152014c0648a996854d28661c42d3602db308826aaf8fc990d189907895c8030fc5ad75113cefba0872f388189142867de1ac72f695802f2d0d3206c9a78237185c32293ef552e6929c5cfbf02e432b72d15ffaa1fefd4e3d6d9be256c6a8d1e25c1a2a096459d20fa4072491292dbbe66326", 0x1000}}, 0x1006) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xf00, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) readv(r2, &(0x7f0000001bc0)=[{&(0x7f0000001540)=""/187, 0xbb}, {0x0}, {&(0x7f0000001800)=""/229, 0xe5}, {&(0x7f0000001900)=""/222, 0xde}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/47, 0x2f}, {&(0x7f0000001ac0)=""/201, 0xc9}], 0x7) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x4, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f0000001c40), 0x80) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) (async) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xf00, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) (async) 00:34:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x49560700, 0x12, r1, 0x100000000) 00:34:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1000000000000006, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103603, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xfffffffd, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x400, 0x7, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x6, 0xfffffff8, 0x1f9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x15b6, 0x3, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x440100) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x100000000) 00:34:49 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async, rerun: 64) r2 = socket(0x10, 0x3, 0xc) (rerun: 64) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x198, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "f81b0e0f91186f77c349bf53e3724b5d485942761d3da8fdc3896b47ced4be02ae9c117345330ba17a5046f5d258b72590de3d2baf029be1b3b763cf813cf2b9229eeca2df3f508bad9587e15d5bbff509ab0d2819d534c552575ae773ca9de3582efe6469808d6638b1279e29020b25cb6f7ab6ebe07df6747cf99d5bb9bcec53ad164e6d24cce4ecdee2b83fcfadfb82fbf90dab020608d9e16c4762cab6864e0c10007799cf9d06cf0a81ebd900eb2972"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6937049edc4696bac0356edf8ed344210623cc1b3b0febc3011cb83657"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "821ff6b90d2f3b80817c2b3af54cf4197f05ea5f4fc83f6dbbb616ee"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20040014}, 0x4400) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f000000b340)) (rerun: 32) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async, rerun: 64) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r4 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:49 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x100) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:34:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1000000000000006, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103603, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xfffffffd, 0x0, 0x7}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x400, 0x7, 0x6}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x6, 0xfffffff8, 0x1f9}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x15b6, 0x3, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x440100) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x100000000) [ 2730.651119][ T6510] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4c880200, 0x12, r1, 0x100000000) 00:34:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x46b70100, 0x12, r1, 0x100000000) 00:34:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x52bd0700, 0x12, r1, 0x100000000) 00:34:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1000000000000006, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103603, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xfffffffd, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x400, 0x7, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x6, 0xfffffff8, 0x1f9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x15b6, 0x3, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x440100) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x100000000) syz_open_dev$dri(&(0x7f0000000100), 0x1000000000000006, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103603, 0x24) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x5, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xfffffffd, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x400, 0x7, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x6, 0xfffffff8, 0x1f9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x15b6, 0x3, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x440100) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x100000000) (async) 00:34:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:50 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async, rerun: 32) r2 = socket(0x10, 0x3, 0xc) (rerun: 32) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x198, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "f81b0e0f91186f77c349bf53e3724b5d485942761d3da8fdc3896b47ced4be02ae9c117345330ba17a5046f5d258b72590de3d2baf029be1b3b763cf813cf2b9229eeca2df3f508bad9587e15d5bbff509ab0d2819d534c552575ae773ca9de3582efe6469808d6638b1279e29020b25cb6f7ab6ebe07df6747cf99d5bb9bcec53ad164e6d24cce4ecdee2b83fcfadfb82fbf90dab020608d9e16c4762cab6864e0c10007799cf9d06cf0a81ebd900eb2972"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6937049edc4696bac0356edf8ed344210623cc1b3b0febc3011cb83657"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "821ff6b90d2f3b80817c2b3af54cf4197f05ea5f4fc83f6dbbb616ee"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20040014}, 0x4400) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async, rerun: 32) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async, rerun: 32) r4 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:50 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) 00:34:50 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getflags(r0, 0x401) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x108}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat(r4, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1, 0x404}, {r1, 0x7}], 0x2, 0x1ff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xc, &(0x7f0000000100), 0x4) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x3, 0x0, &(0x7f0000000240)="deef8d"}) 00:34:50 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) (async) 00:34:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26c, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x100000000) 00:34:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x52da0600, 0x12, r1, 0x100000000) [ 2731.039254][ T6835] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:50 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getflags(r0, 0x401) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x108}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat(r4, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1, 0x404}, {r1, 0x7}], 0x2, 0x1ff) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xc, &(0x7f0000000100), 0x4) (async) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x3, 0x0, &(0x7f0000000240)="deef8d"}) 00:34:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26c, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26c, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x100000000) (async) 00:34:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x54dd0700, 0x12, r1, 0x100000000) 00:34:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:50 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f000000c500)=""/4126, 0x101e}, {&(0x7f00000019c0)=""/94, 0x5e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000000680)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f000000b4c0)=""/4112, 0x1010}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/66, 0x42}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xfffffffffffffeb9}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/18, 0x12}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f0000000640)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:50 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) (async) 00:34:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x59be0700, 0x12, r1, 0x100000000) 00:34:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26c, 0x81}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x100000000) 00:34:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2731.309771][ T7125] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:50 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) fcntl$getflags(r0, 0x401) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async, rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x108}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat(r4, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) (async) poll(&(0x7f0000000300)=[{r1, 0x404}, {r1, 0x7}], 0x2, 0x1ff) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xc, &(0x7f0000000100), 0x4) (async) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x3, 0x0, &(0x7f0000000240)="deef8d"}) 00:34:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x59c80100, 0x12, r1, 0x100000000) 00:34:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x62920700, 0x12, r1, 0x100000000) 00:34:50 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x5, 0x80000001}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x44, &(0x7f0000000240), 0x4) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0xfff, 0x3, 0x7, 0x0, 0x2e, 0x8}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:50 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f000000c500)=""/4126, 0x101e}, {&(0x7f00000019c0)=""/94, 0x5e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000000680)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f000000b4c0)=""/4112, 0x1010}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/66, 0x42}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xfffffffffffffeb9}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/18, 0x12}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f0000000640)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f000000c500)=""/4126, 0x101e}, {&(0x7f00000019c0)=""/94, 0x5e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000000680)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f000000b4c0)=""/4112, 0x1010}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/66, 0x42}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xfffffffffffffeb9}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/18, 0x12}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f0000000640)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x62cc0700, 0x12, r1, 0x100000000) 00:34:50 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x5, 0x80000001}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) (rerun: 32) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x44, &(0x7f0000000240), 0x4) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0xfff, 0x3, 0x7, 0x0, 0x2e, 0x8}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2731.640459][ T7451] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffd, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x2, 0x3, 0x9}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) 00:34:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffd, 0xf, 0x82}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x2, 0x3, 0x9}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r6}) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) (async, rerun: 32) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) 00:34:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x63810700, 0x12, r1, 0x100000000) 00:34:51 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f000000c500)=""/4126, 0x101e}, {&(0x7f00000019c0)=""/94, 0x5e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000000680)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f000000b4c0)=""/4112, 0x1010}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/66, 0x42}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xfffffffffffffeb9}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/18, 0x12}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f0000000640)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffd, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x2, 0x3, 0x9}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r6}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x100000000) 00:34:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)) (async) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x5, 0x80000001}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x44, &(0x7f0000000240), 0x4) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x0, 0xfff, 0x3, 0x7, 0x0, 0x2e, 0x8}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x68010200, 0x12, r1, 0x100000000) [ 2731.995212][ T7710] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80980) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xdfffdffffffffffe, 0x22900) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) syz_open_dev$dri(&(0x7f0000000140), 0x11b, 0x400) 00:34:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getflags(r0, 0x401) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x108}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat(r4, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1, 0x404}, {r1, 0x7}], 0x2, 0x1ff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xc, &(0x7f0000000100), 0x4) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x3, 0x0, &(0x7f0000000240)="deef8d"}) 00:34:51 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f000000b4c0)=""/4098, 0x1002}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000000540)=""/91, 0x5b}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x550e}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/235, 0xeb}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x100007}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f0000000680)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:51 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6a0cafff, 0x12, r1, 0x100000000) 00:34:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80980) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xdfffdffffffffffe, 0x22900) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) syz_open_dev$dri(&(0x7f0000000140), 0x11b, 0x400) 00:34:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) [ 2732.223108][ T7935] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6d602fff, 0x12, r1, 0x100000000) 00:34:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80980) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xdfffdffffffffffe, 0x22900) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) syz_open_dev$dri(&(0x7f0000000140), 0x11b, 0x400) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) pipe2(&(0x7f0000000080), 0x80980) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xdfffdffffffffffe, 0x22900) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) syz_open_dev$dri(&(0x7f0000000140), 0x11b, 0x400) (async) 00:34:51 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (rerun: 64) 00:34:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getflags(r0, 0x401) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x108}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat(r4, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1, 0x404}, {r1, 0x7}], 0x2, 0x1ff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xc, &(0x7f0000000100), 0x4) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x3, 0x0, &(0x7f0000000240)="deef8d"}) 00:34:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x7, 0x80, 0x9, 0xffffffff, 0x3, [0x1, 0x71c, 0xff, 0x1], [0x4, 0xdb, 0xd8b, 0x6], [0x20, 0xfff, 0x3, 0x40], [0x1f, 0xc95, 0x1d98, 0x7ff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7ff, 0x3, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000140)=""/167, 0xa7}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000500)=""/252, 0xfc}], 0x7, 0x2, 0x7fffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6d603fff, 0x12, r1, 0x100000000) 00:34:51 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f000000b4c0)=""/4098, 0x1002}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000000540)=""/91, 0x5b}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x550e}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/235, 0xeb}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x100007}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f0000000680)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f000000b4c0)=""/4098, 0x1002}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000000540)=""/91, 0x5b}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x550e}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/235, 0xeb}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x100007}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f0000000680)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6d9f6fff, 0x12, r1, 0x100000000) 00:34:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x7, 0x80, 0x9, 0xffffffff, 0x3, [0x1, 0x71c, 0xff, 0x1], [0x4, 0xdb, 0xd8b, 0x6], [0x20, 0xfff, 0x3, 0x40], [0x1f, 0xc95, 0x1d98, 0x7ff]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7ff, 0x3, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000140)=""/167, 0xa7}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000500)=""/252, 0xfc}], 0x7, 0x2, 0x7fffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) 00:34:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getflags(r0, 0x401) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x108}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat(r4, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1, 0x404}, {r1, 0x7}], 0x2, 0x1ff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xc, &(0x7f0000000100), 0x4) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)='p', 0x3, 0x0, &(0x7f0000000240)="deef8d"}) [ 2732.566166][ T8256] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6da52fff, 0x12, r1, 0x100000000) 00:34:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x7, 0x81}) (async, rerun: 64) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x7, 0x80, 0x9, 0xffffffff, 0x3, [0x1, 0x71c, 0xff, 0x1], [0x4, 0xdb, 0xd8b, 0x6], [0x20, 0xfff, 0x3, 0x40], [0x1f, 0xc95, 0x1d98, 0x7ff]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7ff, 0x3, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000140)=""/167, 0xa7}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000500)=""/252, 0xfc}], 0x7, 0x2, 0x7fffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (rerun: 64) 00:34:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6ec70100, 0x12, r1, 0x100000000) 00:34:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xe, 0x82}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0x8, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:51 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f000000b4c0)=""/4098, 0x1002}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000000540)=""/91, 0x5b}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x550e}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/235, 0xeb}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x100007}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f0000000680)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:51 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x7, 0x6, 0x4, 0x2e, &(0x7f0000000040)=""/46, 0x1000, &(0x7f0000000300)=""/4096, 0x15, &(0x7f00000000c0)=""/21}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0xfffffffffffffc7d) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x5, 0x2) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x2a0000, 0x10) sendto$inet(r4, &(0x7f0000002280)="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", 0xfb, 0x24000080, &(0x7f0000002380)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f00000023c0)=""/188, &(0x7f0000002480)=0xbc) vmsplice(r3, &(0x7f0000002240)=[{&(0x7f0000000080)="de9d024b33e887092f32d2c8f84b599155a9be2bc97ff1b11c571a6722966fbd2e4464eb1b8f5f9d27960bb8c3a448120060331d381246ee502b10d339561b65ae76a0f5453f5c96136cca06a3844c7c1c3774f0f8dc6b43de83ba08bf888bac88fe888caa7c4132aa48c56a7d46c6fff2715a6c7b0d74f20fec3672521edd393828a03b104370ee93fd1f7e0eef32640873df26b0920b2444b20f4425781b687aab416c72ad571d478e1cd287637519da441113d022d15df496a511475ecaf73e5a9fc5c0", 0xc5}, {&(0x7f0000000180)}], 0x2, 0xc) 00:34:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xe, 0x82}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0x8, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x711cffff, 0x12, r1, 0x100000000) 00:34:52 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x7, 0x6, 0x4, 0x2e, &(0x7f0000000040)=""/46, 0x1000, &(0x7f0000000300)=""/4096, 0x15, &(0x7f00000000c0)=""/21}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x7, 0x6, 0x4, 0x2e, &(0x7f0000000040)=""/46, 0x1000, &(0x7f0000000300)=""/4096, 0x15, &(0x7f00000000c0)=""/21}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:34:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xe, 0x82}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0x8, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x72a19fff, 0x12, r1, 0x100000000) 00:34:52 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)=""/112}, {&(0x7f0000000980)=""/140}, {&(0x7f0000000a40)=""/49}, {&(0x7f0000000a80)=""/130}, {&(0x7f0000000b40)=""/4096}, {&(0x7f0000004840)=""/237}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x3b}], 0x3, &(0x7f0000000780)=""/115, 0x73}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000000740)=[{&(0x7f0000004140)=""/129, 0x81}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/41, 0x29}], 0x4, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/208, 0xd0}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/238, 0xee}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/214, 0xd6}, {&(0x7f000000b4c0)=""/4098, 0x1002}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/183, 0xb7}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/54, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7312ffff, 0x12, r1, 0x100000000) 00:34:52 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0xfffffffffffffc7d) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x5, 0x2) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x2a0000, 0x10) sendto$inet(r4, &(0x7f0000002280)="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", 0xfb, 0x24000080, &(0x7f0000002380)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f00000023c0)=""/188, &(0x7f0000002480)=0xbc) vmsplice(r3, &(0x7f0000002240)=[{&(0x7f0000000080)="de9d024b33e887092f32d2c8f84b599155a9be2bc97ff1b11c571a6722966fbd2e4464eb1b8f5f9d27960bb8c3a448120060331d381246ee502b10d339561b65ae76a0f5453f5c96136cca06a3844c7c1c3774f0f8dc6b43de83ba08bf888bac88fe888caa7c4132aa48c56a7d46c6fff2715a6c7b0d74f20fec3672521edd393828a03b104370ee93fd1f7e0eef32640873df26b0920b2444b20f4425781b687aab416c72ad571d478e1cd287637519da441113d022d15df496a511475ecaf73e5a9fc5c0", 0xc5}, {&(0x7f0000000180)}], 0x2, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0xfffffffffffffc7d) (async) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) (async) socket$inet(0x2, 0x5, 0x2) (async) openat(r1, &(0x7f0000000180)='./file0\x00', 0x2a0000, 0x10) (async) sendto$inet(r4, &(0x7f0000002280)="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", 0xfb, 0x24000080, &(0x7f0000002380)={0x2, 0x4e21, @loopback}, 0x10) (async) getsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f00000023c0)=""/188, &(0x7f0000002480)=0xbc) (async) vmsplice(r3, &(0x7f0000002240)=[{&(0x7f0000000080)="de9d024b33e887092f32d2c8f84b599155a9be2bc97ff1b11c571a6722966fbd2e4464eb1b8f5f9d27960bb8c3a448120060331d381246ee502b10d339561b65ae76a0f5453f5c96136cca06a3844c7c1c3774f0f8dc6b43de83ba08bf888bac88fe888caa7c4132aa48c56a7d46c6fff2715a6c7b0d74f20fec3672521edd393828a03b104370ee93fd1f7e0eef32640873df26b0920b2444b20f4425781b687aab416c72ad571d478e1cd287637519da441113d022d15df496a511475ecaf73e5a9fc5c0", 0xc5}, {&(0x7f0000000180)}], 0x2, 0xc) (async) 00:34:52 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async, rerun: 32) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x7, 0x6, 0x4, 0x2e, &(0x7f0000000040)=""/46, 0x1000, &(0x7f0000000300)=""/4096, 0x15, &(0x7f00000000c0)=""/21}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (rerun: 32) 00:34:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x732fffff, 0x12, r1, 0x100000000) 00:34:52 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) (async, rerun: 64) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)=""/112}, {&(0x7f0000000980)=""/140}, {&(0x7f0000000a40)=""/49}, {&(0x7f0000000a80)=""/130}, {&(0x7f0000000b40)=""/4096}, {&(0x7f0000004840)=""/237}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x3b}], 0x3, &(0x7f0000000780)=""/115, 0x73}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000000740)=[{&(0x7f0000004140)=""/129, 0x81}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/41, 0x29}], 0x4, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/208, 0xd0}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/238, 0xee}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/214, 0xd6}, {&(0x7f000000b4c0)=""/4098, 0x1002}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/183, 0xb7}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/54, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:52 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x4, 0x800}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xecf6, 0x3f, 0x8}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000200)={{r6}, {@void, @actul_num={@val=0x2d, 0x9a9, 0x65}}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) 00:34:52 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0xfffffffffffffc7d) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x5, 0x2) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x2a0000, 0x10) sendto$inet(r4, &(0x7f0000002280)="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", 0xfb, 0x24000080, &(0x7f0000002380)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f00000023c0)=""/188, &(0x7f0000002480)=0xbc) vmsplice(r3, &(0x7f0000002240)=[{&(0x7f0000000080)="de9d024b33e887092f32d2c8f84b599155a9be2bc97ff1b11c571a6722966fbd2e4464eb1b8f5f9d27960bb8c3a448120060331d381246ee502b10d339561b65ae76a0f5453f5c96136cca06a3844c7c1c3774f0f8dc6b43de83ba08bf888bac88fe888caa7c4132aa48c56a7d46c6fff2715a6c7b0d74f20fec3672521edd393828a03b104370ee93fd1f7e0eef32640873df26b0920b2444b20f4425781b687aab416c72ad571d478e1cd287637519da441113d022d15df496a511475ecaf73e5a9fc5c0", 0xc5}, {&(0x7f0000000180)}], 0x2, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0xfffffffffffffc7d) (async) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) (async) socket$inet(0x2, 0x5, 0x2) (async) openat(r1, &(0x7f0000000180)='./file0\x00', 0x2a0000, 0x10) (async) sendto$inet(r4, &(0x7f0000002280)="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", 0xfb, 0x24000080, &(0x7f0000002380)={0x2, 0x4e21, @loopback}, 0x10) (async) getsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f00000023c0)=""/188, &(0x7f0000002480)=0xbc) (async) vmsplice(r3, &(0x7f0000002240)=[{&(0x7f0000000080)="de9d024b33e887092f32d2c8f84b599155a9be2bc97ff1b11c571a6722966fbd2e4464eb1b8f5f9d27960bb8c3a448120060331d381246ee502b10d339561b65ae76a0f5453f5c96136cca06a3844c7c1c3774f0f8dc6b43de83ba08bf888bac88fe888caa7c4132aa48c56a7d46c6fff2715a6c7b0d74f20fec3672521edd393828a03b104370ee93fd1f7e0eef32640873df26b0920b2444b20f4425781b687aab416c72ad571d478e1cd287637519da441113d022d15df496a511475ecaf73e5a9fc5c0", 0xc5}, {&(0x7f0000000180)}], 0x2, 0xc) (async) 00:34:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x74427fff, 0x12, r1, 0x100000000) 00:34:52 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x4, 0x800}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xecf6, 0x3f, 0x8}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000200)={{r6}, {@void, @actul_num={@val=0x2d, 0x9a9, 0x65}}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x4, 0x800}) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xecf6, 0x3f, 0x8}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) (async) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000200)={{r6}, {@void, @actul_num={@val=0x2d, 0x9a9, 0x65}}}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) (async) 00:34:52 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async, rerun: 64) close(r2) (async, rerun: 64) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async, rerun: 32) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (rerun: 32) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)=""/112}, {&(0x7f0000000980)=""/140}, {&(0x7f0000000a40)=""/49}, {&(0x7f0000000a80)=""/130}, {&(0x7f0000000b40)=""/4096}, {&(0x7f0000004840)=""/237}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x3b}], 0x3, &(0x7f0000000780)=""/115, 0x73}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000000740)=[{&(0x7f0000004140)=""/129, 0x81}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/41, 0x29}], 0x4, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/208, 0xd0}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/238, 0xee}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/214, 0xd6}, {&(0x7f000000b4c0)=""/4098, 0x1002}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/183, 0xb7}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/54, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (rerun: 64) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async, rerun: 64) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x74e23fff, 0x12, r1, 0x100000000) 00:34:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:52 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/238, 0xee}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/191, 0xbf}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f0000000540)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xb7, @mcast2}, 0x1c) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:52 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x4, 0x800}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xecf6, 0x3f, 0x8}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000200)={{r6}, {@void, @actul_num={@val=0x2d, 0x9a9, 0x65}}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x4, 0x800}) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xecf6, 0x3f, 0x8}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) (async) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000200)={{r6}, {@void, @actul_num={@val=0x2d, 0x9a9, 0x65}}}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) (async) 00:34:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x74f20fff, 0x12, r1, 0x100000000) 00:34:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x75649fff, 0x12, r1, 0x100000000) 00:34:53 executing program 0: listxattr(0x0, 0x0, 0x0) r0 = userfaultfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = memfd_secret(0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008001140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c00028005000100"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r7, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r3, 0x0, r6, 0x0, 0x4ffe6, 0x0) 00:34:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x76376fff, 0x12, r1, 0x100000000) 00:34:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:53 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2, 0xfffffffd, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:53 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async, rerun: 32) close(r2) (async, rerun: 32) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) (rerun: 32) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/238, 0xee}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/191, 0xbf}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f0000000540)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xb7, @mcast2}, 0x1c) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (rerun: 64) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x76630700, 0x12, r1, 0x100000000) 00:34:53 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2, 0xfffffffd, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x77eaffff, 0x12, r1, 0x100000000) 00:34:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:53 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/238, 0xee}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/191, 0xbf}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f0000000540)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xb7, @mcast2}, 0x1c) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:53 executing program 0: listxattr(0x0, 0x0, 0x0) (async) r0 = userfaultfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) r1 = memfd_secret(0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008001140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c00028005000100"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r7, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0xfffffecc) (async) splice(r3, 0x0, r6, 0x0, 0x4ffe6, 0x0) [ 2734.409824][T10158] validate_nla: 2 callbacks suppressed [ 2734.409843][T10158] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:53 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2, 0xfffffffd, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (rerun: 64) 00:34:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x78047fff, 0x12, r1, 0x100000000) 00:34:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0xe8f0, 0xb3, 0x401, 0x6, 0x3, 0x96, 0x7, 0x0, 0x9, 0x3, 0x6}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010008000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000832b4adc6f86ccca255c9a174a6af38ce063a4a4e35017218f93b6b704de4730df482c9076432f1720b68f0e"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x3, 0x9, 0x6}) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0xfffffffffffffffd) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000200)={0x400, 0x7, 0xbcb2, 0x800, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000040)={0x0, 0x5, 0x3f, 0x80000000, 0x40, 0x0, 0x10001, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) 00:34:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:53 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x1d}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x75b106, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x34, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x78163fff, 0x12, r1, 0x100000000) 00:34:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0xe8f0, 0xb3, 0x401, 0x6, 0x3, 0x96, 0x7, 0x0, 0x9, 0x3, 0x6}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010008000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000832b4adc6f86ccca255c9a174a6af38ce063a4a4e35017218f93b6b704de4730df482c9076432f1720b68f0e"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x3, 0x9, 0x6}) (async) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0xfffffffffffffffd) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000200)={0x400, 0x7, 0xbcb2, 0x800, 0xfffffffe}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000040)={0x0, 0x5, 0x3f, 0x80000000, 0x40, 0x0, 0x10001, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) 00:34:53 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000002, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:53 executing program 0: listxattr(0x0, 0x0, 0x0) (async) r0 = userfaultfd(0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = memfd_secret(0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008001140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c00028005000100"], 0x80}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r7, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (async) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0xfffffecc) (async) splice(r3, 0x0, r6, 0x0, 0x4ffe6, 0x0) [ 2734.705709][T10499] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x78e30700, 0x12, r1, 0x100000000) 00:34:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:53 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000002, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0xe8f0, 0xb3, 0x401, 0x6, 0x3, 0x96, 0x7, 0x0, 0x9, 0x3, 0x6}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010008000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000832b4adc6f86ccca255c9a174a6af38ce063a4a4e35017218f93b6b704de4730df482c9076432f1720b68f0e"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x3, 0x9, 0x6}) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0xfffffffffffffffd) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000200)={0x400, 0x7, 0xbcb2, 0x800, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000040)={0x0, 0x5, 0x3f, 0x80000000, 0x40, 0x0, 0x10001, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0xe8f0, 0xb3, 0x401, 0x6, 0x3, 0x96, 0x7, 0x0, 0x9, 0x3, 0x6}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010008000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000832b4adc6f86ccca255c9a174a6af38ce063a4a4e35017218f93b6b704de4730df482c9076432f1720b68f0e"]) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x3, 0x9, 0x6}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0xfffffffffffffffd) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000200)={0x400, 0x7, 0xbcb2, 0x800, 0xfffffffe}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000040)={0x0, 0x5, 0x3f, 0x80000000, 0x40, 0x0, 0x10001, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) (async) 00:34:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x79262fff, 0x12, r1, 0x100000000) 00:34:54 executing program 0: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{}, {&(0x7f0000000040)="de645556b2fd8cb4b0626ce22066d559657d803ee5bd8946183ad0ebaaf1f936a635f5397bfa47158d180e1bd94ffaa9bdc9400acb39b38e9f42309a9905f24e0c78a1890bbc6e75c6a84a5c4fb8fd45231d3f2d6d0cd7b949353a94bb99c58a25ac051d3a489880d1e5de2e7430a3e01313026f42fd2bc5f207974a176f905ef2b6bf07b307882a81b4296e229ee52a38ecd5b6feec0783b4668eb3abc7eab91ba636", 0xa3}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000000200)="ccd1d17b2cccedbc93ecafec22c1fe4f3babc90a9bba1ad8cfd62efbbe530bd00a7ce8c0ae50570d70d2d543dde5834287e28a57e36758ad2a86ac8520e74ca2d73fabc10ca971ae6a4b5a55a17410d20cb08690b6f73c53ca647906bdf9abcc6f9775b44a5c02c5e44f0cd90c50fc6ce72fd20d7bc493e8ab434c52f4", 0x7d}, {&(0x7f0000000280)="5b3966157734cf4413d542990b447ffe9fe9a8be14c3b0f7cb8bc35a18e9345a68d3ef7156d828edcbcd7a9594797de6049170c4f1e54e53a544b662494c44500a8c1ea57d0735cdc8669c82a1b20feac9dbb24e10917992812738e03862e9924153628630176da60ef15c86fe49670023cae129e71d93e03c17aa89ff15af66f239a28a87d00196e2a073c96d855296c6010c6636c59177e140f2cc266b5a7f202089f77fcb5efbece3d99e3dbc7ed0c2121433", 0xb4}, {&(0x7f0000000340)="b6002691dcf7e46daec33b0bf979814d82e6175c63830ceecf573dcd5e6cd3942aca1082e6429f98ae6ae51324d8021261946e6321ec6055c70abc3bdecc4255b16721939995569ebb60423cc061b5ff3fce056e0a2b68646ab62ca051558a8f2b750bcaade0994f5f6086c1b2cc2497950ea32aed00e5087b6f4c3d79929c76ed2c7a15924ef684e13512b5ccd786616c2157516d5b1bada504ef71dc3d6817e0472ade433d15c81d3f90e2802a9d4fb37e7bb99427e24968e14f7b396734221a4ac9211c269211d918e102acd297e4744148adf9419b6fd918b59742ebfb33ea", 0xe1}], 0x6, &(0x7f00000004c0)=[@op={0x18}], 0x18, 0x4000000}, 0x20000000) unshare(0x40000000) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r0}, 0x8) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a5bef5b42d885eb3cdd0415c6a0db9cb3e100b13b695ebb975b61098cbf964ee7dcffc9cbbf474f54a96310dc9bcca2d29c4949c90bae622ffffff7f69fa428307110a045a73c15ebe282fb549a951ade739d1e9ab449e0b715659e39597280fab2bcab2626d7fcd65c2361c812c64710519b6cb168fade5383161d699e1b0e4a118b0efd8e40574efed6d", @ANYRES16=r2, @ANYBLOB="040025bd7000ffdbdf250600000008003400060000000500300000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000007c0)={0x1, 0x9e006cde9b415d25, 0xff, 0x0, 0x6}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000600)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a41849350e31654fae63cfd7fbc76791be0292ef6be3f47bbc809334695abbbe276934922647125f212", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r0, @ANYBLOB="9031d5fc82aa9c297d4ea08b39193b05b3c6c3857850bef2f733787b412707dac4ca6289dcc8d8dd09e0d1a81e49846758f114", @ANYBLOB="d0e1cda8f1"], 0x20000600}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7f, r3, 0x9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x4, 0x2, 0x6, 0x281, 0xffffffffffffffff, 0x96, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000500)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9f}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x80}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1ac}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x681}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000e80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x69c7df0c0c539d16) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x20002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)}, 0x10) 00:34:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:54 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x1d}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x75b106, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x34, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:54 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000002, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x79587fff, 0x12, r1, 0x100000000) 00:34:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:54 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x803, 0xc26b, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r5 = openat(r4, &(0x7f0000000200)='./file0\x00', 0x2, 0x2) signalfd4(r5, &(0x7f0000000180)={[0x8]}, 0x8, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x3f, 0x432f1bb1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0xff, 0x4, 0x7f}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0xd58c, 0x2, 0x80000001, 0xc21e}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000440)) 00:34:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x79730fff, 0x12, r1, 0x100000000) 00:34:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:54 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x803, 0xc26b, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r5 = openat(r4, &(0x7f0000000200)='./file0\x00', 0x2, 0x2) signalfd4(r5, &(0x7f0000000180)={[0x8]}, 0x8, 0x0) (async, rerun: 64) r6 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x3f, 0x432f1bb1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0xff, 0x4, 0x7f}) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0xd58c, 0x2, 0x80000001, 0xc21e}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000440)) 00:34:54 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async, rerun: 64) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) (rerun: 64) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x1d}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x75b106, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) (async, rerun: 64) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x34, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x797ccfff, 0x12, r1, 0x100000000) 00:34:54 executing program 0: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{}, {&(0x7f0000000040)="de645556b2fd8cb4b0626ce22066d559657d803ee5bd8946183ad0ebaaf1f936a635f5397bfa47158d180e1bd94ffaa9bdc9400acb39b38e9f42309a9905f24e0c78a1890bbc6e75c6a84a5c4fb8fd45231d3f2d6d0cd7b949353a94bb99c58a25ac051d3a489880d1e5de2e7430a3e01313026f42fd2bc5f207974a176f905ef2b6bf07b307882a81b4296e229ee52a38ecd5b6feec0783b4668eb3abc7eab91ba636", 0xa3}, {&(0x7f0000000100)="249e98d9629e484c1a2540a4ffa7e6a25b1b3d4da36818f7f9afa13c438dbb4a4dbff45b0ded533a3bace65a2abdd973823702d067ea40135b5c30f8f46b478e0adf61e7d80a0e10d3e417d79f2aa5cc1f4715e4698a21469ec53eae4717b9620b634f0e235c12947b1ecdb20db7f8d26060b4e5e5bd97eb10aa796177a6ba73160e54c707cedb8cbd3aecfa925b47a9e77e4f0e28d7e1040aaca3ba2fc09f94c77117be38caa9b0c6e0600c964eb89b5929b2c35da0607463e91c44bcf485a3b0a0e16365a07f5bdaf143a7bd67a27cb33a536a56c873fd51281c7b3210b4728387b08e4d17a1912f9f09fff35940f02b91582e37180450bf83349cff79", 0xfe}, {&(0x7f0000000200)="ccd1d17b2cccedbc93ecafec22c1fe4f3babc90a9bba1ad8cfd62efbbe530bd00a7ce8c0ae50570d70d2d543dde5834287e28a57e36758ad2a86ac8520e74ca2d73fabc10ca971ae6a4b5a55a17410d20cb08690b6f73c53ca647906bdf9abcc6f9775b44a5c02c5e44f0cd90c50fc6ce72fd20d7bc493e8ab434c52f4", 0x7d}, {&(0x7f0000000280)="5b3966157734cf4413d542990b447ffe9fe9a8be14c3b0f7cb8bc35a18e9345a68d3ef7156d828edcbcd7a9594797de6049170c4f1e54e53a544b662494c44500a8c1ea57d0735cdc8669c82a1b20feac9dbb24e10917992812738e03862e9924153628630176da60ef15c86fe49670023cae129e71d93e03c17aa89ff15af66f239a28a87d00196e2a073c96d855296c6010c6636c59177e140f2cc266b5a7f202089f77fcb5efbece3d99e3dbc7ed0c2121433", 0xb4}, {&(0x7f0000000340)="b6002691dcf7e46daec33b0bf979814d82e6175c63830ceecf573dcd5e6cd3942aca1082e6429f98ae6ae51324d8021261946e6321ec6055c70abc3bdecc4255b16721939995569ebb60423cc061b5ff3fce056e0a2b68646ab62ca051558a8f2b750bcaade0994f5f6086c1b2cc2497950ea32aed00e5087b6f4c3d79929c76ed2c7a15924ef684e13512b5ccd786616c2157516d5b1bada504ef71dc3d6817e0472ade433d15c81d3f90e2802a9d4fb37e7bb99427e24968e14f7b396734221a4ac9211c269211d918e102acd297e4744148adf9419b6fd918b59742ebfb33ea", 0xe1}], 0x6, &(0x7f00000004c0)=[@op={0x18}], 0x18, 0x4000000}, 0x20000000) unshare(0x40000000) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r0}, 0x8) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a5bef5b42d885eb3cdd0415c6a0db9cb3e100b13b695ebb975b61098cbf964ee7dcffc9cbbf474f54a96310dc9bcca2d29c4949c90bae622ffffff7f69fa428307110a045a73c15ebe282fb549a951ade739d1e9ab449e0b715659e39597280fab2bcab2626d7fcd65c2361c812c64710519b6cb168fade5383161d699e1b0e4a118b0efd8e40574efed6d", @ANYRES16=r2, @ANYBLOB="040025bd7000ffdbdf250600000008003400060000000500300000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000007c0)={0x1, 0x9e006cde9b415d25, 0xff, 0x0, 0x6}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000600)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a41849350e31654fae63cfd7fbc76791be0292ef6be3f47bbc809334695abbbe276934922647125f212", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r0, @ANYBLOB="9031d5fc82aa9c297d4ea08b39193b05b3c6c3857850bef2f733787b412707dac4ca6289dcc8d8dd09e0d1a81e49846758f114", @ANYBLOB="d0e1cda8f1"], 0x20000600}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7f, r3, 0x9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x4, 0x2, 0x6, 0x281, 0xffffffffffffffff, 0x96, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000500)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9f}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x80}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1ac}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x681}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000e80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x69c7df0c0c539d16) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x20002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)}, 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{}, {&(0x7f0000000040)="de645556b2fd8cb4b0626ce22066d559657d803ee5bd8946183ad0ebaaf1f936a635f5397bfa47158d180e1bd94ffaa9bdc9400acb39b38e9f42309a9905f24e0c78a1890bbc6e75c6a84a5c4fb8fd45231d3f2d6d0cd7b949353a94bb99c58a25ac051d3a489880d1e5de2e7430a3e01313026f42fd2bc5f207974a176f905ef2b6bf07b307882a81b4296e229ee52a38ecd5b6feec0783b4668eb3abc7eab91ba636", 0xa3}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000000200)="ccd1d17b2cccedbc93ecafec22c1fe4f3babc90a9bba1ad8cfd62efbbe530bd00a7ce8c0ae50570d70d2d543dde5834287e28a57e36758ad2a86ac8520e74ca2d73fabc10ca971ae6a4b5a55a17410d20cb08690b6f73c53ca647906bdf9abcc6f9775b44a5c02c5e44f0cd90c50fc6ce72fd20d7bc493e8ab434c52f4", 0x7d}, {&(0x7f0000000280)="5b3966157734cf4413d542990b447ffe9fe9a8be14c3b0f7cb8bc35a18e9345a68d3ef7156d828edcbcd7a9594797de6049170c4f1e54e53a544b662494c44500a8c1ea57d0735cdc8669c82a1b20feac9dbb24e10917992812738e03862e9924153628630176da60ef15c86fe49670023cae129e71d93e03c17aa89ff15af66f239a28a87d00196e2a073c96d855296c6010c6636c59177e140f2cc266b5a7f202089f77fcb5efbece3d99e3dbc7ed0c2121433", 0xb4}, {&(0x7f0000000340)="b6002691dcf7e46daec33b0bf979814d82e6175c63830ceecf573dcd5e6cd3942aca1082e6429f98ae6ae51324d8021261946e6321ec6055c70abc3bdecc4255b16721939995569ebb60423cc061b5ff3fce056e0a2b68646ab62ca051558a8f2b750bcaade0994f5f6086c1b2cc2497950ea32aed00e5087b6f4c3d79929c76ed2c7a15924ef684e13512b5ccd786616c2157516d5b1bada504ef71dc3d6817e0472ade433d15c81d3f90e2802a9d4fb37e7bb99427e24968e14f7b396734221a4ac9211c269211d918e102acd297e4744148adf9419b6fd918b59742ebfb33ea", 0xe1}], 0x6, &(0x7f00000004c0)=[@op={0x18}], 0x18, 0x4000000}, 0x20000000) (async) unshare(0x40000000) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r0}, 0x8) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a5bef5b42d885eb3cdd0415c6a0db9cb3e100b13b695ebb975b61098cbf964ee7dcffc9cbbf474f54a96310dc9bcca2d29c4949c90bae622ffffff7f69fa428307110a045a73c15ebe282fb549a951ade739d1e9ab449e0b715659e39597280fab2bcab2626d7fcd65c2361c812c64710519b6cb168fade5383161d699e1b0e4a118b0efd8e40574efed6d", @ANYRES16=r2, @ANYBLOB="040025bd7000ffdbdf250600000008003400060000000500300000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000007c0)={0x1, 0x9e006cde9b415d25, 0xff, 0x0, 0x6}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000600)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a41849350e31654fae63cfd7fbc76791be0292ef6be3f47bbc809334695abbbe276934922647125f212", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r0, @ANYBLOB="9031d5fc82aa9c297d4ea08b39193b05b3c6c3857850bef2f733787b412707dac4ca6289dcc8d8dd09e0d1a81e49846758f114", @ANYBLOB="d0e1cda8f1"], 0x20000600}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7f, r3, 0x9}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x4, 0x2, 0x6, 0x281, 0xffffffffffffffff, 0x96, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000500)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9f}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x80}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1ac}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x681}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000e80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x69c7df0c0c539d16) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00'}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x20002, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)}, 0x10) (async) 00:34:54 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ftruncate(r2, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x7, &(0x7f00000000c0)=[0x3, 0x81, 0x40, 0x4, 0x3, 0x0, 0x7fff000000000000], 0xffffffffffffffff, 0x8}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) ftruncate(r1, 0x800) 00:34:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:54 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x803, 0xc26b, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r5 = openat(r4, &(0x7f0000000200)='./file0\x00', 0x2, 0x2) signalfd4(r5, &(0x7f0000000180)={[0x8]}, 0x8, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x3f, 0x432f1bb1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0xff, 0x4, 0x7f}) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0xd58c, 0x2, 0x80000001, 0xc21e}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000440)) 00:34:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7993bfff, 0x12, r1, 0x100000000) 00:34:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:54 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x1f6, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/91, 0x5b}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x79ed0200, 0x12, r1, 0x100000000) 00:34:54 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ftruncate(r2, 0x80) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x7, &(0x7f00000000c0)=[0x3, 0x81, 0x40, 0x4, 0x3, 0x0, 0x7fff000000000000], 0xffffffffffffffff, 0x8}) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x1) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r6}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) ftruncate(r1, 0x800) 00:34:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x80000000000, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) 00:34:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) [ 2735.571263][T11320] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7a1dbfff, 0x12, r1, 0x100000000) 00:34:57 executing program 0: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{}, {&(0x7f0000000040)="de645556b2fd8cb4b0626ce22066d559657d803ee5bd8946183ad0ebaaf1f936a635f5397bfa47158d180e1bd94ffaa9bdc9400acb39b38e9f42309a9905f24e0c78a1890bbc6e75c6a84a5c4fb8fd45231d3f2d6d0cd7b949353a94bb99c58a25ac051d3a489880d1e5de2e7430a3e01313026f42fd2bc5f207974a176f905ef2b6bf07b307882a81b4296e229ee52a38ecd5b6feec0783b4668eb3abc7eab91ba636", 0xa3}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000000200)="ccd1d17b2cccedbc93ecafec22c1fe4f3babc90a9bba1ad8cfd62efbbe530bd00a7ce8c0ae50570d70d2d543dde5834287e28a57e36758ad2a86ac8520e74ca2d73fabc10ca971ae6a4b5a55a17410d20cb08690b6f73c53ca647906bdf9abcc6f9775b44a5c02c5e44f0cd90c50fc6ce72fd20d7bc493e8ab434c52f4", 0x7d}, {&(0x7f0000000280)="5b3966157734cf4413d542990b447ffe9fe9a8be14c3b0f7cb8bc35a18e9345a68d3ef7156d828edcbcd7a9594797de6049170c4f1e54e53a544b662494c44500a8c1ea57d0735cdc8669c82a1b20feac9dbb24e10917992812738e03862e9924153628630176da60ef15c86fe49670023cae129e71d93e03c17aa89ff15af66f239a28a87d00196e2a073c96d855296c6010c6636c59177e140f2cc266b5a7f202089f77fcb5efbece3d99e3dbc7ed0c2121433", 0xb4}, {&(0x7f0000000340)="b6002691dcf7e46daec33b0bf979814d82e6175c63830ceecf573dcd5e6cd3942aca1082e6429f98ae6ae51324d8021261946e6321ec6055c70abc3bdecc4255b16721939995569ebb60423cc061b5ff3fce056e0a2b68646ab62ca051558a8f2b750bcaade0994f5f6086c1b2cc2497950ea32aed00e5087b6f4c3d79929c76ed2c7a15924ef684e13512b5ccd786616c2157516d5b1bada504ef71dc3d6817e0472ade433d15c81d3f90e2802a9d4fb37e7bb99427e24968e14f7b396734221a4ac9211c269211d918e102acd297e4744148adf9419b6fd918b59742ebfb33ea", 0xe1}], 0x6, &(0x7f00000004c0)=[@op={0x18}], 0x18, 0x4000000}, 0x20000000) unshare(0x40000000) (async) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r0}, 0x8) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a5bef5b42d885eb3cdd0415c6a0db9cb3e100b13b695ebb975b61098cbf964ee7dcffc9cbbf474f54a96310dc9bcca2d29c4949c90bae622ffffff7f69fa428307110a045a73c15ebe282fb549a951ade739d1e9ab449e0b715659e39597280fab2bcab2626d7fcd65c2361c812c64710519b6cb168fade5383161d699e1b0e4a118b0efd8e40574efed6d", @ANYRES16=r2, @ANYBLOB="040025bd7000ffdbdf250600000008003400060000000500300000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000007c0)={0x1, 0x9e006cde9b415d25, 0xff, 0x0, 0x6}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000600)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a41849350e31654fae63cfd7fbc76791be0292ef6be3f47bbc809334695abbbe276934922647125f212", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r0, @ANYBLOB="9031d5fc82aa9c297d4ea08b39193b05b3c6c3857850bef2f733787b412707dac4ca6289dcc8d8dd09e0d1a81e49846758f114", @ANYBLOB="d0e1cda8f1"], 0x20000600}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7f, r3, 0x9}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x4, 0x2, 0x6, 0x281, 0xffffffffffffffff, 0x96, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000500)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9f}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x80}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1ac}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x681}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000e80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x69c7df0c0c539d16) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00'}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x20002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)}, 0x10) 00:34:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x80000000000, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) 00:34:57 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ftruncate(r2, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x7, &(0x7f00000000c0)=[0x3, 0x81, 0x40, 0x4, 0x3, 0x0, 0x7fff000000000000], 0xffffffffffffffff, 0x8}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) ftruncate(r1, 0x800) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ftruncate(r2, 0x80) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) (async) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x7, &(0x7f00000000c0)=[0x3, 0x81, 0x40, 0x4, 0x3, 0x0, 0x7fff000000000000], 0xffffffffffffffff, 0x8}) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) (async) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x1) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r6}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) (async) ftruncate(r1, 0x800) (async) 00:34:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7a3dcfff, 0x12, r1, 0x100000000) 00:34:57 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x1f6, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/91, 0x5b}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ae7ffff, 0x12, r1, 0x100000000) [ 2738.039216][T11616] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x80000000000, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x80000000000, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) (async) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) (async) 00:34:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7aed0700, 0x12, r1, 0x100000000) 00:34:57 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x1f6, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/91, 0x5b}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7aed0700, 0x12, r1, 0x100000000) 00:34:57 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r5, 0xc8550000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2, 0x5201148b, 0xffffffff, 0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x2c2c2c2c}) 00:34:57 executing program 3: rt_sigaction(0x0, &(0x7f0000000140)={&(0x7f0000000040)="0f01c0c4627931e2642e6466470fd6ca660ffdc566400fe3af27bd07a4660f3841acfb05000000c4811759b68a050000c401a6c2330bc4827d9c860a000000470fd181106ab728", 0x842ddf652f9cd8ae, &(0x7f00000000c0)="f02818c4c2c0f3ccc401796ed73ef00fbab8e051000000c4a3f915410008c461f917010f5aaa0c000000f3430f1efe400fada300000000440f1ba659a40000", {[0x9]}}, &(0x7f0000000200)={&(0x7f0000000180)="c482498e14f5cb4438ac2e66450f72d2f3f3410f1ecbf2400f38f03f460fc74bedc4a139f4c73e43decfc4427d795001660f3a0afb00420fd994c606000000", 0x0, &(0x7f00000001c0)="410faefbe90269000066a973000f9c9d03710d062e660f3a40075541d8f6c4c25dadb9000060ffc403d55da70f00000005f30f1efec4017de66600"}, 0x8, &(0x7f0000000240)) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r0}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0x4, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x111001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7b838fff, 0x12, r1, 0x100000000) 00:34:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7bbc0fff, 0x12, r1, 0x100000000) 00:34:57 executing program 3: rt_sigaction(0x0, &(0x7f0000000140)={&(0x7f0000000040)="0f01c0c4627931e2642e6466470fd6ca660ffdc566400fe3af27bd07a4660f3841acfb05000000c4811759b68a050000c401a6c2330bc4827d9c860a000000470fd181106ab728", 0x842ddf652f9cd8ae, &(0x7f00000000c0)="f02818c4c2c0f3ccc401796ed73ef00fbab8e051000000c4a3f915410008c461f917010f5aaa0c000000f3430f1efe400fada300000000440f1ba659a40000", {[0x9]}}, &(0x7f0000000200)={&(0x7f0000000180)="c482498e14f5cb4438ac2e66450f72d2f3f3410f1ecbf2400f38f03f460fc74bedc4a139f4c73e43decfc4427d795001660f3a0afb00420fd994c606000000", 0x0, &(0x7f00000001c0)="410faefbe90269000066a973000f9c9d03710d062e660f3a40075541d8f6c4c25dadb9000060ffc403d55da70f00000005f30f1efec4017de66600"}, 0x8, &(0x7f0000000240)) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r0}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0x4, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x111001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7aed0700, 0x12, r1, 0x100000000) 00:34:57 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r5, 0xc8550000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2, 0x5201148b, 0xffffffff, 0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x2c2c2c2c}) 00:34:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x0, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0xfffffffc}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000740)=""/102, 0x66}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000000600)=""/66, 0x42}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4094, 0xffe}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4087, 0xff7}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:57 executing program 3: rt_sigaction(0x0, &(0x7f0000000140)={&(0x7f0000000040)="0f01c0c4627931e2642e6466470fd6ca660ffdc566400fe3af27bd07a4660f3841acfb05000000c4811759b68a050000c401a6c2330bc4827d9c860a000000470fd181106ab728", 0x842ddf652f9cd8ae, &(0x7f00000000c0)="f02818c4c2c0f3ccc401796ed73ef00fbab8e051000000c4a3f915410008c461f917010f5aaa0c000000f3430f1efe400fada300000000440f1ba659a40000", {[0x9]}}, &(0x7f0000000200)={&(0x7f0000000180)="c482498e14f5cb4438ac2e66450f72d2f3f3410f1ecbf2400f38f03f460fc74bedc4a139f4c73e43decfc4427d795001660f3a0afb00420fd994c606000000", 0x0, &(0x7f00000001c0)="410faefbe90269000066a973000f9c9d03710d062e660f3a40075541d8f6c4c25dadb9000060ffc403d55da70f00000005f30f1efec4017de66600"}, 0x8, &(0x7f0000000240)) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r0}) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0x4, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x111001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7aed0700, 0x12, r1, 0x100000000) 00:34:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7bd52fff, 0x12, r1, 0x100000000) 00:34:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x0, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) [ 2738.733662][T12082] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:57 executing program 0: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ftruncate(r2, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x7, &(0x7f00000000c0)=[0x3, 0x81, 0x40, 0x4, 0x3, 0x0, 0x7fff000000000000], 0xffffffffffffffff, 0x8}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) ftruncate(r1, 0x800) 00:34:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffff, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7bdd0700, 0x12, r1, 0x100000000) 00:34:58 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r5, 0xc8550000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2, 0x5201148b, 0xffffffff, 0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x2c2c2c2c}) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r5, 0xc8550000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2, 0x5201148b, 0xffffffff, 0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x2c2c2c2c}) (async) 00:34:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x0, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffff, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffff, 0x5, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) 00:34:58 executing program 0: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ftruncate(r2, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x7, &(0x7f00000000c0)=[0x3, 0x81, 0x40, 0x4, 0x3, 0x0, 0x7fff000000000000], 0xffffffffffffffff, 0x8}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) ftruncate(r1, 0x800) 00:34:58 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0xfffffffc}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000740)=""/102, 0x66}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000000600)=""/66, 0x42}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4094, 0xffe}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4087, 0xff7}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7be59fff, 0x12, r1, 0x100000000) 00:34:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7cc62fff, 0x12, r1, 0x100000000) 00:34:58 executing program 0: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ftruncate(r2, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x7, &(0x7f00000000c0)=[0x3, 0x81, 0x40, 0x4, 0x3, 0x0, 0x7fff000000000000], 0xffffffffffffffff, 0x8}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) ftruncate(r1, 0x800) 00:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffff, 0x5, 0x8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xf, 0x82}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2, 0x7fff, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x331401, 0x12) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000000c0)={r3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) 00:34:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7d3c6fff, 0x12, r1, 0x100000000) 00:34:58 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async, rerun: 32) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) (rerun: 32) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async, rerun: 64) r2 = socket(0x10, 0x3, 0xc) (rerun: 64) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) (rerun: 32) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0xfffffffc}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000740)=""/102, 0x66}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000000600)=""/66, 0x42}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4094, 0xffe}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4087, 0xff7}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0xf, 0x82}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 0: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ftruncate(r2, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x7, &(0x7f00000000c0)=[0x3, 0x81, 0x40, 0x4, 0x3, 0x0, 0x7fff000000000000], 0xffffffffffffffff, 0x8}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) ftruncate(r1, 0x800) 00:34:58 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2, 0x7fff, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 64) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x331401, 0x12) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) 00:34:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7d4bdfff, 0x12, r1, 0x100000000) 00:34:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0xf, 0x82}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7d4befff, 0x12, r1, 0x100000000) 00:34:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x797ccfff, 0x12, r1, 0x100000000) 00:34:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(0x0, 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000000540)=""/39, 0x27}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000580)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f0000000600)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0xf, 0x82}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0xf, 0x82}) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) [ 2739.653699][T12719] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x797ccfff, 0x12, r1, 0x100000000) 00:34:58 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2, 0x7fff, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x331401, 0x12) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000000c0)={r3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2, 0x7fff, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x331401, 0x12) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) (async) 00:34:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(0x0, 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7d531fff, 0x12, r1, 0x100000000) 00:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xf7541000) 00:34:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x797ccfff, 0x12, r1, 0x100000000) 00:34:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7d5dcfff, 0x12, r1, 0x100000000) 00:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xf7541000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xf7541000) (async) 00:34:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(0x0, 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:59 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000000540)=""/39, 0x27}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000580)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f0000000600)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000000540)=""/39, 0x27}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000580)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f0000000600)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:34:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7d7a6fff, 0x12, r1, 0x100000000) 00:34:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:59 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x143501) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x648003, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/firewire', 0x4000, 0x88) splice(r5, &(0x7f0000000180)=0x7, r6, &(0x7f0000000200)=0x2, 0xfba, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x100000000) 00:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000080)) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xf7541000) 00:34:59 executing program 0: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r1 = memfd_secret(0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x7, 0x1e, 0x8000, 0x1ff, "da94f70dbacc06b33351362182dc67f75ed0da3600b1a51364cfc8eb01bdddda"}) writev(r0, &(0x7f00000000c0), 0x0) [ 2740.046703][T12974] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7dd54fff, 0x12, r1, 0x100000000) 00:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f0000000040), 0xa9, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:59 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) (async, rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x143501) (async, rerun: 32) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x648003, 0x0) (rerun: 32) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/firewire', 0x4000, 0x88) splice(r5, &(0x7f0000000180)=0x7, r6, &(0x7f0000000200)=0x2, 0xfba, 0x5) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x100000000) 00:34:59 executing program 0: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) r1 = memfd_secret(0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x7, 0x1e, 0x8000, 0x1ff, "da94f70dbacc06b33351362182dc67f75ed0da3600b1a51364cfc8eb01bdddda"}) (async) writev(r0, &(0x7f00000000c0), 0x0) 00:34:59 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000000540)=""/39, 0x27}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000580)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f0000000600)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f0000000040), 0xa9, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xa9, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:34:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7dd7bfff, 0x12, r1, 0x100000000) 00:34:59 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x143501) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x648003, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/firewire', 0x4000, 0x88) splice(r5, &(0x7f0000000180)=0x7, r6, &(0x7f0000000200)=0x2, 0xfba, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) (async) pipe(&(0x7f00000000c0)) (async) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x143501) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x648003, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/firewire', 0x4000, 0x88) (async) splice(r5, &(0x7f0000000180)=0x7, r6, &(0x7f0000000200)=0x2, 0xfba, 0x5) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x100000000) (async) 00:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xa9, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:59 executing program 0: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (rerun: 64) r1 = memfd_secret(0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x7, 0x1e, 0x8000, 0x1ff, "da94f70dbacc06b33351362182dc67f75ed0da3600b1a51364cfc8eb01bdddda"}) writev(r0, &(0x7f00000000c0), 0x0) 00:34:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7e048fff, 0x12, r1, 0x100000000) 00:34:59 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4093, 0xffd}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200), 0x0, &(0x7f0000000600)=""/104, 0x68}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/237, 0xed}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/31, 0x1f}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4090, 0xffa}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000580)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}, {&(0x7f0000000540)=""/31, 0x1f}], 0x5, &(0x7f000000afc0)=""/222, 0xde}, 0x800005}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x6, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7e378fff, 0x12, r1, 0x100000000) [ 2740.599875][T13468] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:34:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x9d) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x8000) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, &(0x7f0000000280)=""/78}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newnexthop={0x18}, 0x18}}, 0x0) 00:34:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:34:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7e7aefff, 0x12, r1, 0x100000000) 00:35:00 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000140)={0x7fff, 0x0, 0x1ff, 0x9, 0x2, [0x4, 0x6, 0x74f069b, 0x1], [0x1, 0xfffffffb, 0x3, 0x6], [0xdf, 0x0, 0xc160, 0x400], [0xec0, 0x7f, 0x1, 0xff]}) 00:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x6, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4093, 0xffd}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200), 0x0, &(0x7f0000000600)=""/104, 0x68}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/237, 0xed}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/31, 0x1f}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4090, 0xffa}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000580)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}, {&(0x7f0000000540)=""/31, 0x1f}], 0x5, &(0x7f000000afc0)=""/222, 0xde}, 0x800005}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x9d) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x8000) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, &(0x7f0000000280)=""/78}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newnexthop={0x18}, 0x18}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) dup(r1) (async) creat(&(0x7f0000000000)='./file0\x00', 0x9d) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x8000) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, &(0x7f0000000280)=""/78}) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newnexthop={0x18}, 0x18}}, 0x0) (async) 00:35:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7e9d9fff, 0x12, r1, 0x100000000) 00:35:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ed7afff, 0x12, r1, 0x100000000) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000140)={0x7fff, 0x0, 0x1ff, 0x9, 0x2, [0x4, 0x6, 0x74f069b, 0x1], [0x1, 0xfffffffb, 0x3, 0x6], [0xdf, 0x0, 0xc160, 0x400], [0xec0, 0x7f, 0x1, 0xff]}) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000140)={0x7fff, 0x0, 0x1ff, 0x9, 0x2, [0x4, 0x6, 0x74f069b, 0x1], [0x1, 0xfffffffb, 0x3, 0x6], [0xdf, 0x0, 0xc160, 0x400], [0xec0, 0x7f, 0x1, 0xff]}) (async) 00:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x6, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7f1cdfff, 0x12, r1, 0x100000000) 00:35:00 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4093, 0xffd}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200), 0x0, &(0x7f0000000600)=""/104, 0x68}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/237, 0xed}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/31, 0x1f}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4090, 0xffa}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000580)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}, {&(0x7f0000000540)=""/31, 0x1f}], 0x5, &(0x7f000000afc0)=""/222, 0xde}, 0x800005}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x9d) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x8000) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, &(0x7f0000000280)=""/78}) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newnexthop={0x18}, 0x18}}, 0x0) 00:35:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7f3c2fff, 0x12, r1, 0x100000000) 00:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000140)={0x7fff, 0x0, 0x1ff, 0x9, 0x2, [0x4, 0x6, 0x74f069b, 0x1], [0x1, 0xfffffffb, 0x3, 0x6], [0xdf, 0x0, 0xc160, 0x400], [0xec0, 0x7f, 0x1, 0xff]}) 00:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7f419fff, 0x12, r1, 0x100000000) 00:35:00 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f00000005c0)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000000700)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40), 0x0, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4094, 0xffe}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xd9, 0x80800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) 00:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) [ 2741.519673][T14350] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:35:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7f537fff, 0x12, r1, 0x100000000) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x4, 0x800000f, 0x92, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xd9, 0x80800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) eventfd2(0xd9, 0x80800) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) (async) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x4, 0x800000f, 0x92, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x4, 0x800000f, 0x92}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:35:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7fae0700, 0x12, r1, 0x100000000) 00:35:00 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f00000005c0)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async, rerun: 64) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async, rerun: 64) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async, rerun: 64) close(r2) (async, rerun: 64) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000000700)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40), 0x0, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4094, 0xffe}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async, rerun: 64) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async, rerun: 32) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (rerun: 32) 00:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x801f0200, 0x12, r1, 0x100000000) 00:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:35:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xd9, 0x80800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) 00:35:01 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x4, 0x800000f, 0x92, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7f537fff, 0x12, r1, 0x100000000) 00:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xf4, 0xfffffffe}) 00:35:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x81320200, 0x12, r1, 0x100000000) 00:35:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f00000005c0)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000000700)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40), 0x0, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4094, 0xffe}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f00000005c0)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000000700)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40), 0x0, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4094, 0xffe}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:35:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x87950700, 0x12, r1, 0x100000000) 00:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xf4, 0xfffffffe}) 00:35:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x0, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xd9, 0x80800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) [ 2742.198855][T14929] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:35:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x0, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xf4, 0xfffffffe}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xf4, 0xfffffffe}) (async) 00:35:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8c1b0100, 0x12, r1, 0x100000000) 00:35:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @multicast2}, &(0x7f00000000c0)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000080)={@multicast1, @local, r2}, 0xc) 00:35:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @multicast2}, &(0x7f00000000c0)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000080)={@multicast1, @local, r2}, 0xc) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @multicast2}, &(0x7f00000000c0)=0xc) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000080)={@multicast1, @local, r2}, 0xc) (async) 00:35:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x0, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 2: mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0xee00]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030343030010000000000000069643d", @ANYRESDEC=0x0, @ANYBLOB=',gro5p_id=', @ANYRESDEC=r6]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x4}], {0x4, 0x1}, [{}, {0x8, 0x4}, {0x8, 0x2, r0}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x6, r3}, {0x8, 0x5, r4}, {0x8, 0x4, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x74, 0x3) bpf$ITER_CREATE(0x21, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r8}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x100000000) 00:35:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8d120200, 0x12, r1, 0x100000000) 00:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3f, 0x280001) fchdir(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x1, 0x3) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x5}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}, {&(0x7f0000000540)=""/74, 0x4a}], 0x6, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000000700)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000000780)=""/53, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0xfffffffffffffebc}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/154, 0x9a}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f0000000640)=""/174, 0xae}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}, 0x3}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:01 executing program 2: mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0xee00]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030343030010000000000000069643d", @ANYRESDEC=0x0, @ANYBLOB=',gro5p_id=', @ANYRESDEC=r6]) (async, rerun: 64) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x4}], {0x4, 0x1}, [{}, {0x8, 0x4}, {0x8, 0x2, r0}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x6, r3}, {0x8, 0x5, r4}, {0x8, 0x4, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x74, 0x3) (async, rerun: 64) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async, rerun: 32) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r8}) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x100000000) 00:35:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x0, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8eb90200, 0x12, r1, 0x100000000) 00:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3f, 0x280001) fchdir(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3f, 0x280001) (async) fchdir(r2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) 00:35:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x0, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @multicast2}, &(0x7f00000000c0)=0xc) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000080)={@multicast1, @local, r2}, 0xc) 00:35:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x91420200, 0x12, r1, 0x100000000) 00:35:01 executing program 2: mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0xee00]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030343030010000000000000069643d", @ANYRESDEC=0x0, @ANYBLOB=',gro5p_id=', @ANYRESDEC=r6]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x4}], {0x4, 0x1}, [{}, {0x8, 0x4}, {0x8, 0x2, r0}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x6, r3}, {0x8, 0x5, r4}, {0x8, 0x4, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x74, 0x3) bpf$ITER_CREATE(0x21, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r8}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x100000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400) (async) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0xee00]) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) (async) fstat(0xffffffffffffffff, &(0x7f0000000200)) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030343030010000000000000069643d", @ANYRESDEC=0x0, @ANYBLOB=',gro5p_id=', @ANYRESDEC=r6]) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x4}], {0x4, 0x1}, [{}, {0x8, 0x4}, {0x8, 0x2, r0}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x6, r3}, {0x8, 0x5, r4}, {0x8, 0x4, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x74, 0x3) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x81}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r8}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x100000000) (async) 00:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3f, 0x280001) fchdir(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3f, 0x280001) (async) fchdir(r2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) 00:35:01 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x1, 0x3) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x5}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}, {&(0x7f0000000540)=""/74, 0x4a}], 0x6, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000000700)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000000780)=""/53, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0xfffffffffffffebc}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/154, 0x9a}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f0000000640)=""/174, 0xae}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}, 0x3}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x0, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x93720100, 0x12, r1, 0x100000000) 00:35:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x80000000, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={r1, 0x6}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xf9f, 0x40002) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8d120200, 0x12, r1, 0x100000000) 00:35:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x94e40100, 0x12, r1, 0x100000000) 00:35:02 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x1, 0x3) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x5}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}, {&(0x7f0000000540)=""/74, 0x4a}], 0x6, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000000700)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000000780)=""/53, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0xfffffffffffffebc}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/154, 0x9a}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f0000000640)=""/174, 0xae}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}, 0x3}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x80000000, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={r1, 0x6}) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xf9f, 0x40002) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index, 0x1b9a, {}, 0x0, 0x3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000100)=ANY=[], 0x118) syz_io_uring_setup(0x7986, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000145000/0x8000)=nil, &(0x7f0000147000/0x2000)=nil, 0x0, &(0x7f0000000440)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000380)='./file0\x00', 0x10, 0x40, 0x12345, {0x0, r5}}, 0xfc) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000040)=0x6c9b) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) 00:35:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x96580200, 0x12, r1, 0x100000000) 00:35:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x80000000, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={r1, 0x6}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xf9f, 0x40002) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x0) r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001800000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/18, 0x12) syz_open_dev$char_usb(0xc, 0xb4, 0x401) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000), 0x0) read$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 00:35:02 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index, 0x1b9a, {}, 0x0, 0x3}, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$UHID_CREATE2(r4, &(0x7f0000000100)=ANY=[], 0x118) (async) syz_io_uring_setup(0x7986, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000145000/0x8000)=nil, &(0x7f0000147000/0x2000)=nil, 0x0, &(0x7f0000000440)) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000380)='./file0\x00', 0x10, 0x40, 0x12345, {0x0, r5}}, 0xfc) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000040)=0x6c9b) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) 00:35:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa6d70700, 0x12, r1, 0x100000000) 00:35:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0xfffff800, 0x4}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:02 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index, 0x1b9a, {}, 0x0, 0x3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000100)=ANY=[], 0x118) syz_io_uring_setup(0x7986, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000145000/0x8000)=nil, &(0x7f0000147000/0x2000)=nil, 0x0, &(0x7f0000000440)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000380)='./file0\x00', 0x10, 0x40, 0x12345, {0x0, r5}}, 0xfc) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000040)=0x6c9b) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) (async) pipe(&(0x7f0000000000)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index, 0x1b9a, {}, 0x0, 0x3}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r4, &(0x7f0000000100)=ANY=[], 0x118) (async) syz_io_uring_setup(0x7986, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000145000/0x8000)=nil, &(0x7f0000147000/0x2000)=nil, 0x0, &(0x7f0000000440)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x1, {0x0, r5}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000380)='./file0\x00', 0x10, 0x40, 0x12345, {0x0, r5}}, 0xfc) (async) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000040)=0x6c9b) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x100000000) (async) 00:35:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0xfffff800, 0x4}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) [ 2743.411102][T15976] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:35:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa8f90100, 0x12, r1, 0x100000000) [ 2743.457743][T15976] misc userio: No port type given on /dev/userio 00:35:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) 00:35:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0xfffff800, 0x4}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0xfffff800, 0x4}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) [ 2743.545112][ T3698] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 2743.915052][ T3698] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 2743.931753][ T3698] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2744.185884][ T3698] usb 1-1: string descriptor 0 read error: -22 [ 2744.193389][ T3698] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 2744.202665][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.275798][ T3698] adutux 1-1:128.0: ADU100 now attached to /dev/usb/adutux0 00:35:03 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x0) (async) r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001800000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/18, 0x12) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x401) (async, rerun: 64) write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) write$char_usb(r1, &(0x7f0000000000), 0x0) (async) read$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) (async) read$char_usb(r1, 0x0, 0x0) (async) syz_usb_disconnect(r0) 00:35:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xacd20200, 0x12, r1, 0x100000000) 00:35:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x100000000) 00:35:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000240)={0x2, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r3, &(0x7f0000000140)=""/245}) r4 = open_tree(r1, &(0x7f0000000300)='./file0\x00', 0x80000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340), &(0x7f0000000380)=[0xe4, 0x80000000], 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0xbe0b, 0x48802) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000340)=[0xfffffff9, 0x9, 0xffffff9c, 0x8, 0x2], 0x5, 0x2, 0x2, 0x1, 0x9, 0xdf4, 0xf3c, {0x4, 0x0, 0x800, 0xe3a6, 0x5, 0x5, 0x8, 0x3, 0x3ff, 0x7, 0x6eee, 0x3, 0x6, 0x3c7, "f533cd35670f760d9b69d7bf591bd9f99a6b091840b09fdbf866769fb9e981bf"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000f, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, r6, 0x25dbbf74, 0x100000000, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) 00:35:03 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x8000000100000003, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:35:03 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x8, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) [ 2744.583609][ T3698] usb 1-1: USB disconnect, device number 19 [ 2744.611550][T16308] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:35:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xaee70700, 0x12, r1, 0x100000000) 00:35:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x100000000) 00:35:03 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x8, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) 00:35:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xaf7e0700, 0x12, r1, 0x100000000) 00:35:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000240)={0x2, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r3, &(0x7f0000000140)=""/245}) r4 = open_tree(r1, &(0x7f0000000300)='./file0\x00', 0x80000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340), &(0x7f0000000380)=[0xe4, 0x80000000], 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0xbe0b, 0x48802) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000340)=[0xfffffff9, 0x9, 0xffffff9c, 0x8, 0x2], 0x5, 0x2, 0x2, 0x1, 0x9, 0xdf4, 0xf3c, {0x4, 0x0, 0x800, 0xe3a6, 0x5, 0x5, 0x8, 0x3, 0x3ff, 0x7, 0x6eee, 0x3, 0x6, 0x3c7, "f533cd35670f760d9b69d7bf591bd9f99a6b091840b09fdbf866769fb9e981bf"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000f, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, r6, 0x25dbbf74, 0x100000000, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000240)={0x2, 0x2}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r3, &(0x7f0000000140)=""/245}) (async) open_tree(r1, &(0x7f0000000300)='./file0\x00', 0x80000) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340), &(0x7f0000000380)=[0xe4, 0x80000000], 0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000280), 0xbe0b, 0x48802) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000340)=[0xfffffff9, 0x9, 0xffffff9c, 0x8, 0x2], 0x5, 0x2, 0x2, 0x1, 0x9, 0xdf4, 0xf3c, {0x4, 0x0, 0x800, 0xe3a6, 0x5, 0x5, 0x8, 0x3, 0x3ff, 0x7, 0x6eee, 0x3, 0x6, 0x3c7, "f533cd35670f760d9b69d7bf591bd9f99a6b091840b09fdbf866769fb9e981bf"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000f, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, r6, 0x25dbbf74, 0x100000000, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) (async) 00:35:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x100000000) 00:35:03 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x0) (async) r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001800000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/18, 0x12) syz_open_dev$char_usb(0xc, 0xb4, 0x401) (async) write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) write$char_usb(r1, &(0x7f0000000000), 0x0) read$char_usb(r1, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x6) read$char_usb(r1, 0x0, 0x0) (async) syz_usb_disconnect(r0) 00:35:03 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/21, 0x15}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000003f00)=""/89, 0x59}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004340)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/38, 0x26}, {&(0x7f0000004c00)=""/56, 0x38}, {&(0x7f0000004c40)=""/230, 0xe6}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/167, 0xa7}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/122, 0x7a}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async, rerun: 32) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:35:04 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x8, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x100000000) 00:35:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xafcf0100, 0x12, r1, 0x100000000) 00:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000240)={0x2, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r3, &(0x7f0000000140)=""/245}) r4 = open_tree(r1, &(0x7f0000000300)='./file0\x00', 0x80000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340), &(0x7f0000000380)=[0xe4, 0x80000000], 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0xbe0b, 0x48802) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000340)=[0xfffffff9, 0x9, 0xffffff9c, 0x8, 0x2], 0x5, 0x2, 0x2, 0x1, 0x9, 0xdf4, 0xf3c, {0x4, 0x0, 0x800, 0xe3a6, 0x5, 0x5, 0x8, 0x3, 0x3ff, 0x7, 0x6eee, 0x3, 0x6, 0x3c7, "f533cd35670f760d9b69d7bf591bd9f99a6b091840b09fdbf866769fb9e981bf"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000f, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, r6, 0x25dbbf74, 0x100000000, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000240)={0x2, 0x2}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r3, &(0x7f0000000140)=""/245}) (async) open_tree(r1, &(0x7f0000000300)='./file0\x00', 0x80000) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340), &(0x7f0000000380)=[0xe4, 0x80000000], 0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000280), 0xbe0b, 0x48802) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000340)=[0xfffffff9, 0x9, 0xffffff9c, 0x8, 0x2], 0x5, 0x2, 0x2, 0x1, 0x9, 0xdf4, 0xf3c, {0x4, 0x0, 0x800, 0xe3a6, 0x5, 0x5, 0x8, 0x3, 0x3ff, 0x7, 0x6eee, 0x3, 0x6, 0x3c7, "f533cd35670f760d9b69d7bf591bd9f99a6b091840b09fdbf866769fb9e981bf"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000f, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={0x0, r6, 0x25dbbf74, 0x100000000, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x100000000) (async) [ 2744.878389][T16630] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:35:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:35:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb6c00100, 0x12, r1, 0x100000000) 00:35:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x100000000) 00:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0xc4001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x801, 0xda2bff14edd57b18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:35:04 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)}], 0x2, &(0x7f0000000640)=""/183, 0xb7}, 0x2}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000000740)=""/192, 0xc0}], 0x2, &(0x7f0000000840)=""/113, 0x71}, 0xfffffffe}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/255, 0xff}], 0x2, &(0x7f0000000b80)=""/14, 0xe}, 0x3c00000}, {{&(0x7f0000000bc0)=@tipc=@id, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/84, 0x54}, {&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/70, 0x46}, {&(0x7f0000001d80)=""/137, 0x89}, {&(0x7f0000001e40)}], 0x6, &(0x7f0000001f00)=""/18, 0x12}}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001fc0)=""/250, 0xfa}, {&(0x7f00000020c0)=""/90, 0x5a}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x3, &(0x7f0000003180)=""/237, 0xed}}, {{&(0x7f0000003280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003300)=""/212, 0xd4}, {&(0x7f0000003400)=""/118, 0x76}, {&(0x7f0000003480)=""/23, 0x17}, {&(0x7f00000034c0)=""/42, 0x2a}, {&(0x7f0000003500)=""/170, 0xaa}], 0x5, &(0x7f0000003640)=""/22, 0x16}, 0x3f}, {{&(0x7f0000003680)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000003700)=""/31, 0x1f}, {&(0x7f0000003740)=""/158, 0x9e}, {&(0x7f0000003800)=""/225, 0xe1}, {&(0x7f0000003900)=""/123, 0x7b}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/35, 0x23}, {&(0x7f00000049c0)=""/32, 0x20}, {&(0x7f0000004a00)=""/8, 0x8}, {&(0x7f0000004a40)=""/236, 0xec}], 0x9, &(0x7f0000004c00)=""/139, 0x8b}, 0x26}, {{&(0x7f0000004cc0)=@alg, 0x80, &(0x7f0000005200)=[{&(0x7f0000004d40)=""/134, 0x86}, {&(0x7f0000004e00)=""/54, 0x36}, {&(0x7f0000004e40)=""/227, 0xe3}, {&(0x7f0000004f40)=""/26, 0x1a}, {&(0x7f0000004f80)=""/222, 0xde}, {&(0x7f0000005080)=""/213, 0xd5}, {&(0x7f0000005180)=""/69, 0x45}], 0x7, &(0x7f0000005280)=""/42, 0x2a}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f00000052c0)=""/248, 0xf8}, {&(0x7f00000053c0)=""/235, 0xeb}], 0x2, &(0x7f0000005500)=""/95, 0x5f}, 0x4ba}], 0x9, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:04 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x400, 0x0, '\x00', 0x6, 0x7}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0xc4001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xb}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x801, 0xda2bff14edd57b18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xbdd40700, 0x12, r1, 0x100000000) 00:35:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) syz_clone3(&(0x7f0000000400)={0x15a000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x32}, &(0x7f0000000200)=""/1, 0x1, &(0x7f0000000500)=""/81, &(0x7f00000003c0)=[r2, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) r3 = gettid() ptrace$getregs(0xffffffffffffffff, r3, 0x1ff, &(0x7f0000000180)=""/101) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x5, 0x3) socket(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r5 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x101800, 0x0, 0x18}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0xfffc, 0x0, @empty, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xfb}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x68) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r4) 00:35:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) [ 2745.190169][T16970] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:35:04 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x400, 0x0, '\x00', 0x6, 0x7}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0xc4001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xb}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x801, 0xda2bff14edd57b18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) 00:35:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xbed40700, 0x12, r1, 0x100000000) 00:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) 00:35:04 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async, rerun: 64) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (rerun: 64) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async, rerun: 32) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) (rerun: 32) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)}], 0x2, &(0x7f0000000640)=""/183, 0xb7}, 0x2}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000000740)=""/192, 0xc0}], 0x2, &(0x7f0000000840)=""/113, 0x71}, 0xfffffffe}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/255, 0xff}], 0x2, &(0x7f0000000b80)=""/14, 0xe}, 0x3c00000}, {{&(0x7f0000000bc0)=@tipc=@id, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/84, 0x54}, {&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/70, 0x46}, {&(0x7f0000001d80)=""/137, 0x89}, {&(0x7f0000001e40)}], 0x6, &(0x7f0000001f00)=""/18, 0x12}}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001fc0)=""/250, 0xfa}, {&(0x7f00000020c0)=""/90, 0x5a}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x3, &(0x7f0000003180)=""/237, 0xed}}, {{&(0x7f0000003280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003300)=""/212, 0xd4}, {&(0x7f0000003400)=""/118, 0x76}, {&(0x7f0000003480)=""/23, 0x17}, {&(0x7f00000034c0)=""/42, 0x2a}, {&(0x7f0000003500)=""/170, 0xaa}], 0x5, &(0x7f0000003640)=""/22, 0x16}, 0x3f}, {{&(0x7f0000003680)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000003700)=""/31, 0x1f}, {&(0x7f0000003740)=""/158, 0x9e}, {&(0x7f0000003800)=""/225, 0xe1}, {&(0x7f0000003900)=""/123, 0x7b}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/35, 0x23}, {&(0x7f00000049c0)=""/32, 0x20}, {&(0x7f0000004a00)=""/8, 0x8}, {&(0x7f0000004a40)=""/236, 0xec}], 0x9, &(0x7f0000004c00)=""/139, 0x8b}, 0x26}, {{&(0x7f0000004cc0)=@alg, 0x80, &(0x7f0000005200)=[{&(0x7f0000004d40)=""/134, 0x86}, {&(0x7f0000004e00)=""/54, 0x36}, {&(0x7f0000004e40)=""/227, 0xe3}, {&(0x7f0000004f40)=""/26, 0x1a}, {&(0x7f0000004f80)=""/222, 0xde}, {&(0x7f0000005080)=""/213, 0xd5}, {&(0x7f0000005180)=""/69, 0x45}], 0x7, &(0x7f0000005280)=""/42, 0x2a}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f00000052c0)=""/248, 0xf8}, {&(0x7f00000053c0)=""/235, 0xeb}], 0x2, &(0x7f0000005500)=""/95, 0x5f}, 0x4ba}], 0x9, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (rerun: 32) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async, rerun: 64) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc0bb0700, 0x12, r1, 0x100000000) 00:35:04 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x400, 0x0, '\x00', 0x6, 0x7}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xbdd40700, 0x12, r1, 0x100000000) 00:35:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) (async) r2 = fcntl$getown(r1, 0x9) syz_clone3(&(0x7f0000000400)={0x15a000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x32}, &(0x7f0000000200)=""/1, 0x1, &(0x7f0000000500)=""/81, &(0x7f00000003c0)=[r2, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) r3 = gettid() ptrace$getregs(0xffffffffffffffff, r3, 0x1ff, &(0x7f0000000180)=""/101) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket(0x1e, 0x5, 0x3) socket(0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async, rerun: 32) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 32) r5 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x101800, 0x0, 0x18}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0xfffc, 0x0, @empty, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xfb}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x68) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r4) 00:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:35:04 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) (async, rerun: 32) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)}], 0x2, &(0x7f0000000640)=""/183, 0xb7}, 0x2}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000000740)=""/192, 0xc0}], 0x2, &(0x7f0000000840)=""/113, 0x71}, 0xfffffffe}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/255, 0xff}], 0x2, &(0x7f0000000b80)=""/14, 0xe}, 0x3c00000}, {{&(0x7f0000000bc0)=@tipc=@id, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/84, 0x54}, {&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/70, 0x46}, {&(0x7f0000001d80)=""/137, 0x89}, {&(0x7f0000001e40)}], 0x6, &(0x7f0000001f00)=""/18, 0x12}}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001fc0)=""/250, 0xfa}, {&(0x7f00000020c0)=""/90, 0x5a}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x3, &(0x7f0000003180)=""/237, 0xed}}, {{&(0x7f0000003280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003300)=""/212, 0xd4}, {&(0x7f0000003400)=""/118, 0x76}, {&(0x7f0000003480)=""/23, 0x17}, {&(0x7f00000034c0)=""/42, 0x2a}, {&(0x7f0000003500)=""/170, 0xaa}], 0x5, &(0x7f0000003640)=""/22, 0x16}, 0x3f}, {{&(0x7f0000003680)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000003700)=""/31, 0x1f}, {&(0x7f0000003740)=""/158, 0x9e}, {&(0x7f0000003800)=""/225, 0xe1}, {&(0x7f0000003900)=""/123, 0x7b}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/35, 0x23}, {&(0x7f00000049c0)=""/32, 0x20}, {&(0x7f0000004a00)=""/8, 0x8}, {&(0x7f0000004a40)=""/236, 0xec}], 0x9, &(0x7f0000004c00)=""/139, 0x8b}, 0x26}, {{&(0x7f0000004cc0)=@alg, 0x80, &(0x7f0000005200)=[{&(0x7f0000004d40)=""/134, 0x86}, {&(0x7f0000004e00)=""/54, 0x36}, {&(0x7f0000004e40)=""/227, 0xe3}, {&(0x7f0000004f40)=""/26, 0x1a}, {&(0x7f0000004f80)=""/222, 0xde}, {&(0x7f0000005080)=""/213, 0xd5}, {&(0x7f0000005180)=""/69, 0x45}], 0x7, &(0x7f0000005280)=""/42, 0x2a}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f00000052c0)=""/248, 0xf8}, {&(0x7f00000053c0)=""/235, 0xeb}], 0x2, &(0x7f0000005500)=""/95, 0x5f}, 0x4ba}], 0x9, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xbdd40700, 0x12, r1, 0x100000000) 00:35:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc0e70100, 0x12, r1, 0x100000000) 00:35:04 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x8, 0x101}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:35:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xbdd40700, 0x12, r1, 0x100000000) 00:35:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc1a90200, 0x12, r1, 0x100000000) 00:35:05 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x8, 0x101}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) 00:35:05 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x5, 0xc003fd) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/165, 0xa5}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4087, 0xff7}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/110, 0x6e}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc2f30700, 0x12, r1, 0x100000000) 00:35:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) syz_clone3(&(0x7f0000000400)={0x15a000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x32}, &(0x7f0000000200)=""/1, 0x1, &(0x7f0000000500)=""/81, &(0x7f00000003c0)=[r2, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) r3 = gettid() ptrace$getregs(0xffffffffffffffff, r3, 0x1ff, &(0x7f0000000180)=""/101) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x5, 0x3) socket(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r5 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x101800, 0x0, 0x18}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0xfffc, 0x0, @empty, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xfb}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x68) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) (async) dup(r0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) (async) fcntl$getown(r1, 0x9) (async) syz_clone3(&(0x7f0000000400)={0x15a000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x32}, &(0x7f0000000200)=""/1, 0x1, &(0x7f0000000500)=""/81, &(0x7f00000003c0)=[r2, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) (async) gettid() (async) ptrace$getregs(0xffffffffffffffff, r3, 0x1ff, &(0x7f0000000180)=""/101) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket(0x1e, 0x5, 0x3) (async) socket(0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x101800, 0x0, 0x18}, 0x18) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0xfffc, 0x0, @empty, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xfb}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x68) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r4) (async) 00:35:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (fail_nth: 1) 00:35:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc6d30700, 0x12, r1, 0x100000000) 00:35:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (fail_nth: 2) 00:35:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xcaa00600, 0x12, r1, 0x100000000) 00:35:05 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x8, 0x101}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x8, 0x101}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x100000000) (async) 00:35:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (fail_nth: 3) 00:35:05 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x5, 0xc003fd) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/165, 0xa5}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4087, 0xff7}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/110, 0x6e}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) 00:35:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (fail_nth: 4) 00:35:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xcc970700, 0x12, r1, 0x100000000) 00:35:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) memfd_create(&(0x7f0000000f40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) fallocate(r0, 0x1, 0x0, 0xff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) read$midi(0xffffffffffffffff, &(0x7f0000000800)=""/157, 0x9d) 00:35:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xcdf10700, 0x12, r1, 0x100000000) 00:35:05 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000380)={r8, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={r9}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)={r9}) 00:35:05 executing program 4: r0 = socket(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) r1 = socket$inet6(0x10, 0x5, 0xc003fd) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) close(r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) clock_gettime(0x0, &(0x7f000000b340)={0x0, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/165, 0xa5}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4087, 0xff7}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/110, 0x6e}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) r6 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) fcntl$setlease(r6, 0x400, 0x1) close(r3) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) socket(0x10, 0x3, 0xc) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='nicvf0\x00', 0x10) (async) socket$inet6(0x10, 0x5, 0xc003fd) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910300000400080008001e0000ca13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}, {&(0x7f0000000280)="82b096dd81984c5a9cb7cb39d8226a135488057bcc3964998669ab50a20a31eda9497dbe87e0c3ddafdf70ab927067a6fda53abd63866c541c63cca749a40aeb1f5a45f6ff465d35e90cf94c2c3773d0d4f4b5641f081d67d35edeb2d0a5428499dec9a34b7b6e92c7a26ed92da87ae5cd696eb6799e29934aaac0a210274a6107ed74fb173ee2e803ebcd3df9c62911fc85fbc15a47864f14774f0b2a63a69c29c302004914ff4012086e5b8b6bbb15225b7bb1e82ac88dd9c6efada05611d312fa8e6ae13e495f53afb434e4eb6b0fc6c4371b4d5e056770", 0xd9}, {&(0x7f0000000000)="eb03b43ff58e6a0dca80f38031bd31042baec418c0295245274f5fb4db1f64a0639fb8c8f05563d8c5595c2acf61", 0x2e}], 0x3}, 0x0) (async) write(r1, &(0x7f00000001c0)="9f00000001c007110000010423dcffdf0000000000000045c0a1b960792977ee6b1472e74d7c66508f425d357a3bcc72f57059c12ca5bb460b6a110d5e3c814ca89de377876c9eded18d5c163fac208431ae01dc5ab1a4faf1011a830bfb138a95a14245d40c73dfac86fe3e793dfb8684b242788bee9b6207f2f2882afe294d2c71e9bb198a9fb177", 0x89) (async) socket(0x10, 0x3, 0xc) (async) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) close(r2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xcb002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x204, 0x0) (async) clock_gettime(0x0, &(0x7f000000b340)) (async) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000b0c0)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c80)=""/30, 0x1e}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/125, 0x7d}, 0x7f}, {{&(0x7f0000003dc0)=@rc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/167, 0xa7}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000003f80)=""/87, 0x57}], 0x3, &(0x7f0000004040)=""/109, 0x6d}, 0x200}, {{&(0x7f00000040c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @rose, @rose, @netrom, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/143, 0x8f}], 0x1, &(0x7f0000004240)=""/88, 0x58}, 0x5512}, {{&(0x7f00000042c0)=@pppoe, 0x80, &(0x7f0000004a40)=[{&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000004400)=""/145, 0x91}, {&(0x7f00000044c0)=""/228, 0xe4}, {&(0x7f00000045c0)=""/186, 0xba}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/120, 0x78}, {&(0x7f000000b3c0)=""/243, 0xf3}, {&(0x7f0000004940)=""/21, 0x15}, {&(0x7f0000004980)=""/170, 0xaa}], 0xa, &(0x7f0000004b00)=""/62, 0x3e}, 0x6}, {{&(0x7f0000004b40)=@alg, 0x80, &(0x7f0000005d40)}, 0x2000}, {{&(0x7f0000005d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000005e00)=""/223, 0xdf}, {&(0x7f0000005f00)=""/151, 0x97}, {&(0x7f0000005fc0)=""/93, 0x5d}, {&(0x7f0000006040)=""/117, 0x75}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/165, 0xa5}, {&(0x7f0000007240)=""/143, 0x8f}], 0x8, &(0x7f0000007380)=""/4087, 0xff7}, 0x7}, {{&(0x7f0000008380)=@tipc=@id, 0x80, &(0x7f000000a940)=[{&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/65, 0x41}, {&(0x7f0000009480)=""/69, 0x45}, {&(0x7f0000009500)=""/194, 0xc2}, {&(0x7f0000009600)=""/110, 0x6e}, {&(0x7f0000009680)=""/226, 0xe2}, {&(0x7f0000009780)=""/4096, 0x1000}, {&(0x7f000000a780)=""/206, 0xce}, {&(0x7f000000a880)=""/165, 0xa5}], 0x9, &(0x7f000000aa00)=""/205, 0xcd}, 0x651c844f}, {{&(0x7f00000048c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f000000ac00)=[{&(0x7f000000ab00)=""/131, 0x83}], 0x1, &(0x7f000000ac40)=""/124, 0x7c}}, {{&(0x7f000000acc0)=@sco={0x1f, @none}, 0x80, &(0x7f000000af80)=[{&(0x7f000000ad40)=""/229, 0xe5}, {&(0x7f000000ae40)=""/99, 0x63}, {&(0x7f000000aec0)=""/77, 0x4d}, {&(0x7f000000af40)=""/22, 0x16}], 0x4, &(0x7f000000afc0)=""/222, 0xde}, 0x5}], 0xa, 0x0, &(0x7f000000b380)={r4, r5+10000000}) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000200)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080), 0x2) (async) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) (async) close(r3) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) (async) 00:35:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xcf110700, 0x12, r1, 0x100000000) 00:35:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (fail_nth: 5) 00:35:05 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000380)={r8, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={r9}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)={r9}) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) close(r6) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r7}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000380)={r8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={r9}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)={r9}) (async) 00:35:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x556}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x80, 0x7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0xbe85, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) dup(r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) (fail_nth: 6) [ 2746.888719][T18408] ================================================================== [ 2746.896835][T18408] BUG: KASAN: use-after-free in drm_gem_object_release_handle+0xa1/0xb0 [ 2746.905281][T18408] Read of size 8 at addr ffff88807abc61e8 by task syz-executor.1/18408 [ 2746.913539][T18408] [ 2746.915883][T18408] CPU: 0 PID: 18408 Comm: syz-executor.1 Not tainted 6.0.0-syzkaller #0 [ 2746.924236][T18408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2746.934400][T18408] Call Trace: 00:35:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) memfd_create(&(0x7f0000000f40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x4) (rerun: 32) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) fallocate(r0, 0x1, 0x0, 0xff) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) (async) read$midi(0xffffffffffffffff, &(0x7f0000000800)=""/157, 0x9d) [ 2746.937694][T18408] [ 2746.940635][T18408] dump_stack_lvl+0xcd/0x134 [ 2746.945260][T18408] print_report.cold+0x2ba/0x719 [ 2746.950254][T18408] ? drm_gem_object_release_handle+0xa1/0xb0 [ 2746.956270][T18408] kasan_report+0xb1/0x1e0 [ 2746.960809][T18408] ? drm_gem_object_release_handle+0xa1/0xb0 [ 2746.966827][T18408] drm_gem_object_release_handle+0xa1/0xb0 [ 2746.972669][T18408] ? drm_gem_object_handle_put_unlocked+0x390/0x390 [ 2746.979296][T18408] idr_for_each+0x113/0x220 [ 2746.984004][T18408] ? idr_find+0x50/0x50 [ 2746.988239][T18408] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2746.994077][T18408] drm_gem_release+0x22/0x30 [ 2746.998705][T18408] drm_file_free.part.0+0x805/0xb80 [ 2747.003945][T18408] ? fsnotify+0x1680/0x1680 [ 2747.008485][T18408] drm_close_helper.isra.0+0x17d/0x1f0 [ 2747.013981][T18408] drm_release+0x1e6/0x530 [ 2747.018430][T18408] __fput+0x277/0x9d0 [ 2747.022440][T18408] ? drm_release_noglobal+0x180/0x180 [ 2747.027856][T18408] task_work_run+0xdd/0x1a0 [ 2747.032397][T18408] exit_to_user_mode_prepare+0x23c/0x250 [ 2747.038061][T18408] syscall_exit_to_user_mode+0x19/0x50 [ 2747.043731][T18408] do_syscall_64+0x42/0xb0 [ 2747.048180][T18408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2747.054109][T18408] RIP: 0033:0x7f38c623c37b [ 2747.058557][T18408] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 2747.078194][T18408] RSP: 002b:00007f38c68dfb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2747.086640][T18408] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 00007f38c623c37b [ 2747.094638][T18408] RDX: 00007f38c63b0a78 RSI: ffffffffffffffff RDI: 0000000000000008 [ 2747.102723][T18408] RBP: 00007f38c63ad980 R08: 0000000000000000 R09: 00007f38c63b0a80 [ 2747.111158][T18408] R10: 00007f38c68dfc80 R11: 0000000000000293 R12: 000000000029e9e6 [ 2747.119238][T18408] R13: 00007f38c68dfc80 R14: 00007f38c63abf80 R15: 0000000000000032 [ 2747.127240][T18408] [ 2747.130276][T18408] [ 2747.132612][T18408] Allocated by task 18417: 00:35:06 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81}) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0xf, 0x82, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x100000000) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000380)={r8, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={r9}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)={r9}) [ 2747.137307][T18408] kasan_save_stack+0x1e/0x40 [ 2747.142005][T18408] __kasan_kmalloc+0xa9/0xd0 [ 2747.146631][T18408] vgem_gem_create_object+0x38/0xb0 [ 2747.151916][T18408] __drm_gem_shmem_create+0x80/0x480 [ 2747.157227][T18408] drm_gem_shmem_dumb_create+0x13c/0x380 [ 2747.162896][T18408] drm_mode_create_dumb+0x26c/0x2f0 [ 2747.168180][T18408] drm_ioctl_kernel+0x27d/0x4e0 [ 2747.173056][T18408] drm_ioctl+0x51e/0x9d0 [ 2747.177331][T18408] __x64_sys_ioctl+0x193/0x200 [ 2747.182130][T18408] do_syscall_64+0x35/0xb0 [ 2747.186579][T18408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2747.192497][T18408] [ 2747.194835][T18408] Freed by task 18417: [ 2747.199014][T18408] kasan_save_stack+0x1e/0x40 [ 2747.203730][T18408] kasan_set_track+0x21/0x30 [ 2747.208347][T18408] kasan_set_free_info+0x20/0x30 [ 2747.213315][T18408] ____kasan_slab_free+0x166/0x1c0 [ 2747.218455][T18408] slab_free_freelist_hook+0x8b/0x1c0 [ 2747.223863][T18408] kfree+0xe2/0x580 [ 2747.227694][T18408] drm_gem_mmap+0x4fc/0x770 [ 2747.232228][T18408] mmap_region+0xbff/0x1460 [ 2747.236756][T18408] do_mmap+0x863/0xfa0 [ 2747.240845][T18408] vm_mmap_pgoff+0x1ab/0x270 [ 2747.245458][T18408] ksys_mmap_pgoff+0x41b/0x5a0 [ 2747.250247][T18408] do_syscall_64+0x35/0xb0 [ 2747.254690][T18408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2747.260720][T18408] [ 2747.263064][T18408] Last potentially related work creation: [ 2747.268884][T18408] kasan_save_stack+0x1e/0x40 [ 2747.273590][T18408] __kasan_record_aux_stack+0xbe/0xd0 [ 2747.278993][T18408] call_rcu+0x99/0x790 [ 2747.283094][T18408] rxrpc_lookup_local+0xe36/0x1110 [ 2747.288294][T18408] rxrpc_sendmsg+0x4b8/0x650 [ 2747.292961][T18408] sock_sendmsg+0xcf/0x120 [ 2747.297407][T18408] ____sys_sendmsg+0x6eb/0x810 [ 2747.302195][T18408] __sys_sendmsg_sock+0x26/0x30 [ 2747.307089][T18408] io_sendmsg+0x246/0x7d0 [ 2747.311502][T18408] io_issue_sqe+0x6b6/0xd20 [ 2747.316083][T18408] io_submit_sqes+0x94e/0x1d30 [ 2747.320987][T18408] __do_sys_io_uring_enter+0xb85/0x1ea0 [ 2747.326587][T18408] do_syscall_64+0x35/0xb0 [ 2747.331121][T18408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2747.337043][T18408] [ 2747.339376][T18408] Second to last potentially related work creation: [ 2747.345970][T18408] kasan_save_stack+0x1e/0x40 [ 2747.350677][T18408] __kasan_record_aux_stack+0xbe/0xd0 [ 2747.356173][T18408] insert_work+0x48/0x350 [ 2747.360621][T18408] __queue_work+0x625/0x1210 [ 2747.365423][T18408] queue_work_on+0xee/0x110 [ 2747.369950][T18408] ops_exit_list+0xb0/0x170 [ 2747.374505][T18408] cleanup_net+0x4ea/0xb00 [ 2747.378973][T18408] process_one_work+0x991/0x1610 [ 2747.383937][T18408] worker_thread+0x665/0x1080 [ 2747.388637][T18408] kthread+0x2e4/0x3a0 [ 2747.392745][T18408] ret_from_fork+0x1f/0x30 [ 2747.397192][T18408] [ 2747.399587][T18408] The buggy address belongs to the object at ffff88807abc6000 [ 2747.399587][T18408] which belongs to the cache kmalloc-1k of size 1024 [ 2747.413834][T18408] The buggy address is located 488 bytes inside of [ 2747.413834][T18408] 1024-byte region [ffff88807abc6000, ffff88807abc6400) [ 2747.427219][T18408] [ 2747.429556][T18408] The buggy address belongs to the physical page: [ 2747.435998][T18408] page:ffffea0001eaf000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7abc0 [ 2747.446168][T18408] head:ffffea0001eaf000 order:3 compound_mapcount:0 compound_pincount:0 [ 2747.455067][T18408] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2747.463093][T18408] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888011841dc0 [ 2747.471704][T18408] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 2747.480834][T18408] page dumped because: kasan: bad access detected [ 2747.487267][T18408] page_owner tracks the page as allocated [ 2747.492990][T18408] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 0, tgid 0 (swapper/0), ts 178216866364, free_ts 178216694884 [ 2747.513173][T18408] get_page_from_freelist+0x109b/0x2ce0 [ 2747.518757][T18408] __alloc_pages+0x1c7/0x510 [ 2747.523388][T18408] alloc_pages+0x1a6/0x270 [ 2747.527846][T18408] allocate_slab+0x27e/0x3d0 [ 2747.532476][T18408] ___slab_alloc+0x7f1/0xe10 [ 2747.537101][T18408] __slab_alloc.constprop.0+0x4d/0xa0 [ 2747.542501][T18408] __kmalloc_node_track_caller+0x2f1/0x390 [ 2747.548333][T18408] __alloc_skb+0xd9/0x2f0 [ 2747.552695][T18408] __tcp_send_ack.part.0+0x67/0x760 [ 2747.558036][T18408] tcp_send_ack+0x7d/0xa0 [ 2747.562593][T18408] __tcp_ack_snd_check+0x156/0x9c0 [ 2747.567804][T18408] tcp_rcv_established+0x1a7c/0x20e0 [ 2747.573113][T18408] tcp_v4_do_rcv+0x66c/0x9b0 [ 2747.577907][T18408] tcp_v4_rcv+0x3438/0x3930 [ 2747.582445][T18408] ip_protocol_deliver_rcu+0x9b/0x7c0 [ 2747.587847][T18408] ip_local_deliver_finish+0x2e8/0x4c0 [ 2747.593332][T18408] page last free stack trace: [ 2747.598013][T18408] free_pcp_prepare+0x5e4/0xd20 [ 2747.603231][T18408] free_unref_page+0x19/0x4d0 [ 2747.607919][T18408] skb_free_head+0x96/0x110 [ 2747.612420][T18408] skb_release_data+0x5f1/0x870 [ 2747.617271][T18408] napi_consume_skb+0x145/0x280 [ 2747.622117][T18408] net_rx_action+0x342/0xd90 [ 2747.626718][T18408] __do_softirq+0x1d3/0x9c6 [ 2747.631213][T18408] [ 2747.633520][T18408] Memory state around the buggy address: [ 2747.639164][T18408] ffff88807abc6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2747.647236][T18408] ffff88807abc6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2747.655286][T18408] >ffff88807abc6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2747.663764][T18408] ^ [ 2747.671292][T18408] ffff88807abc6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2747.679360][T18408] ffff88807abc6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 00:35:06 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000300)={r2}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x2, 0xf, 0x1000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8, 0x10001, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000001c0)={r7}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={0x0, 0x8}) 00:35:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) memfd_create(&(0x7f0000000f40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x4) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) fallocate(r0, 0x1, 0x0, 0xff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) (async) read$midi(0xffffffffffffffff, &(0x7f0000000800)=""/157, 0x9d) 00:35:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x0, 0x81}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd1700100, 0x12, r1, 0x100000000) 00:35:06 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0xc26b, 0x81, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000300)={r2}) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x2, 0xf, 0x1000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x200, 0x789, 0x3}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8, 0x10001, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000001c0)={r7}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x100000000) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f00000006c0)="e7", 0x1}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={0x0, 0x8}) [ 2747.687435][T18408] ================================================================== [ 2747.695626][ C0] vkms_vblank_simulate: vblank timer overrun [ 2747.766126][T18408] Kernel panic - not syncing: panic_on_warn set ... [ 2747.772743][T18408] CPU: 0 PID: 18408 Comm: syz-executor.1 Not tainted 6.0.0-syzkaller #0 [ 2747.781082][T18408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2747.791129][T18408] Call Trace: [ 2747.794398][T18408] [ 2747.797318][T18408] dump_stack_lvl+0xcd/0x134 [ 2747.801901][T18408] panic+0x2c8/0x627 [ 2747.805820][T18408] ? panic_print_sys_info.part.0+0x10b/0x10b [ 2747.811790][T18408] ? preempt_schedule_common+0x59/0xc0 [ 2747.817258][T18408] ? preempt_schedule_thunk+0x16/0x18 [ 2747.822624][T18408] ? drm_gem_object_release_handle+0xa1/0xb0 [ 2747.828604][T18408] end_report.part.0+0x3f/0x7c [ 2747.833364][T18408] kasan_report.cold+0xa/0xf [ 2747.838045][T18408] ? drm_gem_object_release_handle+0xa1/0xb0 [ 2747.844016][T18408] drm_gem_object_release_handle+0xa1/0xb0 [ 2747.849812][T18408] ? drm_gem_object_handle_put_unlocked+0x390/0x390 [ 2747.856387][T18408] idr_for_each+0x113/0x220 [ 2747.860891][T18408] ? idr_find+0x50/0x50 [ 2747.865142][T18408] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2747.871110][T18408] drm_gem_release+0x22/0x30 [ 2747.875704][T18408] drm_file_free.part.0+0x805/0xb80 [ 2747.880890][T18408] ? fsnotify+0x1680/0x1680 [ 2747.885387][T18408] drm_close_helper.isra.0+0x17d/0x1f0 [ 2747.890854][T18408] drm_release+0x1e6/0x530 [ 2747.895444][T18408] __fput+0x277/0x9d0 [ 2747.899434][T18408] ? drm_release_noglobal+0x180/0x180 [ 2747.904999][T18408] task_work_run+0xdd/0x1a0 [ 2747.909508][T18408] exit_to_user_mode_prepare+0x23c/0x250 [ 2747.915149][T18408] syscall_exit_to_user_mode+0x19/0x50 [ 2747.920603][T18408] do_syscall_64+0x42/0xb0 [ 2747.925025][T18408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2747.930949][T18408] RIP: 0033:0x7f38c623c37b [ 2747.935362][T18408] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 2747.954964][T18408] RSP: 002b:00007f38c68dfb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2747.963804][T18408] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 00007f38c623c37b [ 2747.971777][T18408] RDX: 00007f38c63b0a78 RSI: ffffffffffffffff RDI: 0000000000000008 [ 2747.979756][T18408] RBP: 00007f38c63ad980 R08: 0000000000000000 R09: 00007f38c63b0a80 [ 2747.987726][T18408] R10: 00007f38c68dfc80 R11: 0000000000000293 R12: 000000000029e9e6 [ 2747.995687][T18408] R13: 00007f38c68dfc80 R14: 00007f38c63abf80 R15: 0000000000000032 [ 2748.003822][T18408] [ 2748.007073][T18408] Kernel Offset: disabled [ 2748.015563][T18408] Rebooting in 86400 seconds..