z_open_dev$dri(&(0x7f0000000000), 0x5, 0xa0480) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x501180, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x69, 0x161000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000100)={r1}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"92811503e4d50e2a68b22312ade3ee6143ccbb09d075c8f786d989578f4d231f", r0, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"c8990b7ba4eb8d0e588de5bd1ffba29c55e4e770647d139a2f0ff566d48ea818", r4}) 21:50:24 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:24 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2a000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0)=""/63, 0x3f}}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:24 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x2, 0x10, r0, 0x82000000) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffa000/0x4000)=nil) 21:50:24 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@ax25={{0x3, @null}, [@remote, @remote, @default, @null, @netrom, @remote, @null, @default]}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/165, 0xa5}], 0x0, &(0x7f00000000c0)=""/100, 0x64}, 0x2041) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 21:50:24 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 21:50:24 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2a000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0)=""/63, 0x3f}}, 0x10) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:24 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xd0, "d6690cdac6320c6e88eb6915d09b1aaeb1e23a9f2a5cfffd089cb9e8ba8477ac", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:24 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x2, 0x10, r0, 0x82000000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x2, 0x10, r0, 0x82000000) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:24 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140e, 0x20, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x198, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x198}, 0x1, 0x0, 0x0, 0x40020}, 0x2004084) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) 21:50:24 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2a000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/30, 0x1e, 0x0, &(0x7f00000000c0)=""/63, 0x3f}}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:24 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 21:50:24 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xd0, "d6690cdac6320c6e88eb6915d09b1aaeb1e23a9f2a5cfffd089cb9e8ba8477ac", 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:24 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140e, 0x20, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x198, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x198}, 0x1, 0x0, 0x0, 0x40020}, 0x2004084) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140e, 0x20, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x198, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x198}, 0x1, 0x0, 0x0, 0x40020}, 0x2004084) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) (async) 21:50:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x80) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7fffffffffffffff, 0x60400) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x7, 0x3f, 0x2, 0xffff, 0x2, 0x9}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/185) 21:50:24 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) (async) 21:50:24 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x1000)=nil) 21:50:24 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140e, 0x20, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x198, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x198}, 0x1, 0x0, 0x0, 0x40020}, 0x2004084) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) 21:50:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xd0, "d6690cdac6320c6e88eb6915d09b1aaeb1e23a9f2a5cfffd089cb9e8ba8477ac", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:24 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x80) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7fffffffffffffff, 0x60400) (rerun: 32) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x7, 0x3f, 0x2, 0xffff, 0x2, 0x9}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/185) 21:50:24 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) shmget(0x2, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 21:50:24 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x1000)=nil) 21:50:24 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x300, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) 21:50:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0xd4d, 0x27467b1428dcfb5e) clock_getres(0x3, &(0x7f0000000080)) 21:50:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x80) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7fffffffffffffff, 0x60400) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x7, 0x3f, 0x2, 0xffff, 0x2, 0x9}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/185) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x80) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x7fffffffffffffff, 0x60400) (async) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x7, 0x3f, 0x2, 0xffff, 0x2, 0x9}) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/185) (async) 21:50:24 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) shmget(0x2, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 21:50:24 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:24 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x1000)=nil) 21:50:24 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x300, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) 21:50:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x2602) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/186) 21:50:24 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) shmget(0x2, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) shmget(0x2, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) 21:50:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0xd4d, 0x27467b1428dcfb5e) clock_getres(0x3, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0xd4d, 0x27467b1428dcfb5e) (async) clock_getres(0x3, &(0x7f0000000080)) (async) 21:50:25 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x300, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x300, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) (async) 21:50:25 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 21:50:25 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 21:50:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x2602) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/186) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x2602) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/186) (async) 21:50:25 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 21:50:25 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) 21:50:25 executing program 4: madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) 21:50:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0xd4d, 0x27467b1428dcfb5e) clock_getres(0x3, &(0x7f0000000080)) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) 21:50:25 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 21:50:25 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 21:50:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x2602) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/186) 21:50:25 executing program 4: madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) 21:50:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x200040) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) 21:50:25 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:25 executing program 5: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) shmget(0x2, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) (async) 21:50:25 executing program 4: madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) 21:50:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/214) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:25 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x200040) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:25 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffff709) 21:50:25 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4084010, 0xffffffffffffffff, 0x100) 21:50:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x200040) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:25 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/214) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:25 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) 21:50:25 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4084010, 0xffffffffffffffff, 0x100) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffff709) 21:50:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async, rerun: 32) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/214) (async, rerun: 32) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:25 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) 21:50:25 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4084010, 0xffffffffffffffff, 0x100) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4084010, 0xffffffffffffffff, 0x100) (async) 21:50:25 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1404, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0xc000014) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) shmget(0x1, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)="dd0dcf7a639778dfb2d3637b757af0256292fd681790fdc4297e1a608ad227462291183d859307f6a7e8058f9de402ece122dc44f34c6df6b37224311dff9de793999895bc3c5eca34", 0x49, r2}, 0x68) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x11) 21:50:25 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffff709) 21:50:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) 21:50:25 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1404, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0xc000014) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) shmget(0x1, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)="dd0dcf7a639778dfb2d3637b757af0256292fd681790fdc4297e1a608ad227462291183d859307f6a7e8058f9de402ece122dc44f34c6df6b37224311dff9de793999895bc3c5eca34", 0x49, r2}, 0x68) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x11) 21:50:25 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfc, 0x40, 0x6, 0x7f, 0x0, 0x80000000000000, 0x80000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2000, 0x4, 0x20, 0x3, 0x7fffffff, 0x3, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x7}}, 0x18) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x66, 0x0, 0x5, 0x0, 0xffffffff00000001, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x801, 0x6, 0x18, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r0, 0x2) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 21:50:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x400) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x8, 0x1, 0x7, 0xcdf1, 0x9, 0x714}) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000080)="1421d6faeba6cd2bb54311d8dcfebbb9c93e65dfeae6b186b89d7dbe5207040430d6ec82912b68b6aaa3b7068cbd363f6a424520132f7ac77161088951b2b05d79a224fe272a37902cbf54e1e15c89490c20fd0230965774593bb72c3c4e9f5344394d6acf0031c8052aeb6e66490a45062160c73feb5d434466bb5324aba96b8461376c1c28", 0x86) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:25 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:25 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c8", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000280)=""/81, 0x51, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="dbe5a378690af91ec7a3122c7fa18af6cbdaaa89e9d622e588b9204ef2e764d39282f6a139afbfd37c5204c9c94a7843d9947074de4192dd70b40067f4e7e810419eaf65ab36bdbdfee096650c95e5bbf1dc3a839f7ae45ccecf7023fead71eb29d1b653a1df4aa9f29b826631331064898fbe11d7ce121568eb00b8afa9c444463f87b11b20b90435c8496423985bfe193b67a396f3a38c40b5455bcdd1c0a3e5ead8b274b8", 0xa6, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r0, r2}, &(0x7f0000000200)=""/203, 0xcb, &(0x7f0000000400)={&(0x7f0000000300)={'sha1-generic\x00'}, &(0x7f0000000340)="f49c3e6a1b586823a8af32a1c4897b09c006ca6aac5ec5c856a0a7d7a3af9f3b967bfadcbe432e4fed5006e780c5c08254adb7e9c1357af85c5a6141f405bf4e2df5c6aa0a9c7086d7006d548a6ff102430e3b0bf64bb3c575792cd02c815e9a607ffbb60dc64604c9e17ad03f1a6e96d5311a4dca4f151247ba1ad37511bf856e5b7f1d8919e1bcea1833a4d36908", 0x8f}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffe, 0x14000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) 21:50:25 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1404, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0xc000014) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) shmget(0x1, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)="dd0dcf7a639778dfb2d3637b757af0256292fd681790fdc4297e1a608ad227462291183d859307f6a7e8058f9de402ece122dc44f34c6df6b37224311dff9de793999895bc3c5eca34", 0x49, r2}, 0x68) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x11) 21:50:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x400) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x8, 0x1, 0x7, 0xcdf1, 0x9, 0x714}) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000080)="1421d6faeba6cd2bb54311d8dcfebbb9c93e65dfeae6b186b89d7dbe5207040430d6ec82912b68b6aaa3b7068cbd363f6a424520132f7ac77161088951b2b05d79a224fe272a37902cbf54e1e15c89490c20fd0230965774593bb72c3c4e9f5344394d6acf0031c8052aeb6e66490a45062160c73feb5d434466bb5324aba96b8461376c1c28", 0x86) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x400) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x8, 0x1, 0x7, 0xcdf1, 0x9, 0x714}) (async) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000080)="1421d6faeba6cd2bb54311d8dcfebbb9c93e65dfeae6b186b89d7dbe5207040430d6ec82912b68b6aaa3b7068cbd363f6a424520132f7ac77161088951b2b05d79a224fe272a37902cbf54e1e15c89490c20fd0230965774593bb72c3c4e9f5344394d6acf0031c8052aeb6e66490a45062160c73feb5d434466bb5324aba96b8461376c1c28", 0x86) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) 21:50:25 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfc, 0x40, 0x6, 0x7f, 0x0, 0x80000000000000, 0x80000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2000, 0x4, 0x20, 0x3, 0x7fffffff, 0x3, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x7}}, 0x18) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x66, 0x0, 0x5, 0x0, 0xffffffff00000001, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x801, 0x6, 0x18, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r0, 0x2) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 21:50:25 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c8", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000280)=""/81, 0x51, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="dbe5a378690af91ec7a3122c7fa18af6cbdaaa89e9d622e588b9204ef2e764d39282f6a139afbfd37c5204c9c94a7843d9947074de4192dd70b40067f4e7e810419eaf65ab36bdbdfee096650c95e5bbf1dc3a839f7ae45ccecf7023fead71eb29d1b653a1df4aa9f29b826631331064898fbe11d7ce121568eb00b8afa9c444463f87b11b20b90435c8496423985bfe193b67a396f3a38c40b5455bcdd1c0a3e5ead8b274b8", 0xa6, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r0, r2}, &(0x7f0000000200)=""/203, 0xcb, &(0x7f0000000400)={&(0x7f0000000300)={'sha1-generic\x00'}, &(0x7f0000000340)="f49c3e6a1b586823a8af32a1c4897b09c006ca6aac5ec5c856a0a7d7a3af9f3b967bfadcbe432e4fed5006e780c5c08254adb7e9c1357af85c5a6141f405bf4e2df5c6aa0a9c7086d7006d548a6ff102430e3b0bf64bb3c575792cd02c815e9a607ffbb60dc64604c9e17ad03f1a6e96d5311a4dca4f151247ba1ad37511bf856e5b7f1d8919e1bcea1833a4d36908", 0x8f}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffe, 0x14000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c8", 0x1, 0xffffffffffffffff) (async) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) (async) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000280)=""/81, 0x51, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="dbe5a378690af91ec7a3122c7fa18af6cbdaaa89e9d622e588b9204ef2e764d39282f6a139afbfd37c5204c9c94a7843d9947074de4192dd70b40067f4e7e810419eaf65ab36bdbdfee096650c95e5bbf1dc3a839f7ae45ccecf7023fead71eb29d1b653a1df4aa9f29b826631331064898fbe11d7ce121568eb00b8afa9c444463f87b11b20b90435c8496423985bfe193b67a396f3a38c40b5455bcdd1c0a3e5ead8b274b8", 0xa6, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r0, r2}, &(0x7f0000000200)=""/203, 0xcb, &(0x7f0000000400)={&(0x7f0000000300)={'sha1-generic\x00'}, &(0x7f0000000340)="f49c3e6a1b586823a8af32a1c4897b09c006ca6aac5ec5c856a0a7d7a3af9f3b967bfadcbe432e4fed5006e780c5c08254adb7e9c1357af85c5a6141f405bf4e2df5c6aa0a9c7086d7006d548a6ff102430e3b0bf64bb3c575792cd02c815e9a607ffbb60dc64604c9e17ad03f1a6e96d5311a4dca4f151247ba1ad37511bf856e5b7f1d8919e1bcea1833a4d36908", 0x8f}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffe, 0x14000) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:25 executing program 5: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) 21:50:25 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x23fd734d, 0x20000) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil}) 21:50:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x400) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x8, 0x1, 0x7, 0xcdf1, 0x9, 0x714}) (async) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000080)="1421d6faeba6cd2bb54311d8dcfebbb9c93e65dfeae6b186b89d7dbe5207040430d6ec82912b68b6aaa3b7068cbd363f6a424520132f7ac77161088951b2b05d79a224fe272a37902cbf54e1e15c89490c20fd0230965774593bb72c3c4e9f5344394d6acf0031c8052aeb6e66490a45062160c73feb5d434466bb5324aba96b8461376c1c28", 0x86) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:25 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c8", 0x1, 0xffffffffffffffff) (async) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000280)=""/81, 0x51, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) (async, rerun: 32) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="dbe5a378690af91ec7a3122c7fa18af6cbdaaa89e9d622e588b9204ef2e764d39282f6a139afbfd37c5204c9c94a7843d9947074de4192dd70b40067f4e7e810419eaf65ab36bdbdfee096650c95e5bbf1dc3a839f7ae45ccecf7023fead71eb29d1b653a1df4aa9f29b826631331064898fbe11d7ce121568eb00b8afa9c444463f87b11b20b90435c8496423985bfe193b67a396f3a38c40b5455bcdd1c0a3e5ead8b274b8", 0xa6, 0x0) (rerun: 32) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r0, r2}, &(0x7f0000000200)=""/203, 0xcb, &(0x7f0000000400)={&(0x7f0000000300)={'sha1-generic\x00'}, &(0x7f0000000340)="f49c3e6a1b586823a8af32a1c4897b09c006ca6aac5ec5c856a0a7d7a3af9f3b967bfadcbe432e4fed5006e780c5c08254adb7e9c1357af85c5a6141f405bf4e2df5c6aa0a9c7086d7006d548a6ff102430e3b0bf64bb3c575792cd02c815e9a607ffbb60dc64604c9e17ad03f1a6e96d5311a4dca4f151247ba1ad37511bf856e5b7f1d8919e1bcea1833a4d36908", 0x8f}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffe, 0x14000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 21:50:25 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfc, 0x40, 0x6, 0x7f, 0x0, 0x80000000000000, 0x80000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2000, 0x4, 0x20, 0x3, 0x7fffffff, 0x3, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x7}}, 0x18) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x66, 0x0, 0x5, 0x0, 0xffffffff00000001, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x801, 0x6, 0x18, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r0, 0x2) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfc, 0x40, 0x6, 0x7f, 0x0, 0x80000000000000, 0x80000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2000, 0x4, 0x20, 0x3, 0x7fffffff, 0x3, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x13) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x7}}, 0x18) (async) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x66, 0x0, 0x5, 0x0, 0xffffffff00000001, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x801, 0x6, 0x18, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r0, 0x2) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) 21:50:25 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) 21:50:26 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x23fd734d, 0x20000) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil}) 21:50:26 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:26 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:26 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x4d, 0x1f, 0x5, 0x0, 0x7, 0x1e50, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x6}, 0x200, 0x7, 0x3, 0x9, 0x80, 0x7, 0x5, 0x0, 0xffffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x10) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x4000010, r0, 0x1) 21:50:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:26 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/225) 21:50:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:26 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x23fd734d, 0x20000) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) syz_open_dev$dri(&(0x7f0000000000), 0x23fd734d, 0x20000) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil}) (async) 21:50:26 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 21:50:26 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x4d, 0x1f, 0x5, 0x0, 0x7, 0x1e50, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x6}, 0x200, 0x7, 0x3, 0x9, 0x80, 0x7, 0x5, 0x0, 0xffffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x10) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x4000010, r0, 0x1) 21:50:26 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async, rerun: 32) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/225) (rerun: 32) 21:50:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:26 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 21:50:26 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x4d, 0x1f, 0x5, 0x0, 0x7, 0x1e50, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x6}, 0x200, 0x7, 0x3, 0x9, 0x80, 0x7, 0x5, 0x0, 0xffffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x10) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x4000010, r0, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil}) (async) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x4d, 0x1f, 0x5, 0x0, 0x7, 0x1e50, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x6}, 0x200, 0x7, 0x3, 0x9, 0x80, 0x7, 0x5, 0x0, 0xffffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x10) (async) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x4000010, r0, 0x1) (async) 21:50:26 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/225) 21:50:26 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 21:50:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:26 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 21:50:26 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x430280) 21:50:26 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x480) r0 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x8}) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000010c0)=""/107) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/4096) 21:50:26 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="000229bd7000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600800000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x50085}, 0x8891) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4d5}, {0xc, 0x90, 0x6b0}}]}, 0x50}}, 0x90) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000180)) 21:50:26 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x64) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x0, "4124b12a4c26a0b5eaaf0832b30e348abe59ed3b0db88dd312ef614c6d634b35", 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="cf3a2d07ced384d963e8242f36393ac817bd1c3c695393692f610a92cf6dd34d179b18174aaa325545d69ff59e6d94ca0f2695fe2902afbb3c29510cbb06684030069757000024050313138152b3a4011fda45963509aed7b833268135d002b80edbb20eccf793e4b131016fab361398427628a8c87823e6d52f6d413d4fb77b0ad8216a02fe2a9159198e74d74ba126703b4c421b728ae78bd8b494847310afe0e09f2f17a3a5daf259f78e0eee1a869e9198c481137434c92b81f0bee237c96cbe71", 0xc3, r0}, 0x68) 21:50:26 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 21:50:26 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x430280) 21:50:26 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 21:50:26 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x480) (rerun: 32) r0 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x1}) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (rerun: 32) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x8}) (async, rerun: 32) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000010c0)=""/107) (async) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/4096) 21:50:26 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 21:50:26 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x430280) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x430280) (async) 21:50:26 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x64) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x0, "4124b12a4c26a0b5eaaf0832b30e348abe59ed3b0db88dd312ef614c6d634b35", 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="cf3a2d07ced384d963e8242f36393ac817bd1c3c695393692f610a92cf6dd34d179b18174aaa325545d69ff59e6d94ca0f2695fe2902afbb3c29510cbb06684030069757000024050313138152b3a4011fda45963509aed7b833268135d002b80edbb20eccf793e4b131016fab361398427628a8c87823e6d52f6d413d4fb77b0ad8216a02fe2a9159198e74d74ba126703b4c421b728ae78bd8b494847310afe0e09f2f17a3a5daf259f78e0eee1a869e9198c481137434c92b81f0bee237c96cbe71", 0xc3, r0}, 0x68) 21:50:26 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 21:50:26 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="000229bd7000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600800000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x50085}, 0x8891) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4d5}, {0xc, 0x90, 0x6b0}}]}, 0x50}}, 0x90) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000180)) 21:50:26 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x64) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x0, "4124b12a4c26a0b5eaaf0832b30e348abe59ed3b0db88dd312ef614c6d634b35", 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="cf3a2d07ced384d963e8242f36393ac817bd1c3c695393692f610a92cf6dd34d179b18174aaa325545d69ff59e6d94ca0f2695fe2902afbb3c29510cbb06684030069757000024050313138152b3a4011fda45963509aed7b833268135d002b80edbb20eccf793e4b131016fab361398427628a8c87823e6d52f6d413d4fb77b0ad8216a02fe2a9159198e74d74ba126703b4c421b728ae78bd8b494847310afe0e09f2f17a3a5daf259f78e0eee1a869e9198c481137434c92b81f0bee237c96cbe71", 0xc3, r0}, 0x68) 21:50:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/135) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/105) 21:50:26 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="000229bd7000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600800000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x50085}, 0x8891) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4d5}, {0xc, 0x90, 0x6b0}}]}, 0x50}}, 0x90) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000180)) 21:50:26 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="000229bd7000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600800000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x50085}, 0x8891) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4d5}, {0xc, 0x90, 0x6b0}}]}, 0x50}}, 0x90) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000180)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="000229bd7000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600800000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x50085}, 0x8891) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4d5}, {0xc, 0x90, 0x6b0}}]}, 0x50}}, 0x90) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) (async) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000180)) (async) 21:50:26 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x513903, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:26 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x480) r0 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x1}) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x8}) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000010c0)=""/107) (async) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/4096) 21:50:26 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 21:50:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/135) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/105) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/135) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10) (async) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) (async) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/105) (async) 21:50:26 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1404, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0xc000014) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) shmget(0x1, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)="dd0dcf7a639778dfb2d3637b757af0256292fd681790fdc4297e1a608ad227462291183d859307f6a7e8058f9de402ece122dc44f34c6df6b37224311dff9de793999895bc3c5eca34", 0x49, r2}, 0x68) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x11) 21:50:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000240)=""/160) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x9, 0x3ff]) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f00000001c0)=0xffff) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/69) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r2, 0xe694}) 21:50:26 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 21:50:26 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x513903, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:26 executing program 4: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)="862339d71f109a11feff1e05a179d0f4c3c8518fe76fccc6d35c0c5483458f996959d37ce33d8e534af51678460961228e0e73e0733eaabd10f659abcec03bf904f111c9b42b52046f1b004e78ef6bad5a5922d442ffd5e4e79fec68227267f641e3ca1589e35ed33de2dc0df7452995eb9e6252c82a32be87c0a4201924e3cdf84923ade176a64cd94a2571b693d74aa7c7d5285c3b5f8f21f1e17285dbac1e4070419ec1d08af66f39f263aa6327d553cdac3edcb704c792e15e0a1eebcc", 0xbf}, 0x68) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x30, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x3, 0x30, 0xffffffffffffffff, 0x0) 21:50:26 executing program 4: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)="862339d71f109a11feff1e05a179d0f4c3c8518fe76fccc6d35c0c5483458f996959d37ce33d8e534af51678460961228e0e73e0733eaabd10f659abcec03bf904f111c9b42b52046f1b004e78ef6bad5a5922d442ffd5e4e79fec68227267f641e3ca1589e35ed33de2dc0df7452995eb9e6252c82a32be87c0a4201924e3cdf84923ade176a64cd94a2571b693d74aa7c7d5285c3b5f8f21f1e17285dbac1e4070419ec1d08af66f39f263aa6327d553cdac3edcb704c792e15e0a1eebcc", 0xbf}, 0x68) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x30, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x3, 0x30, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)="862339d71f109a11feff1e05a179d0f4c3c8518fe76fccc6d35c0c5483458f996959d37ce33d8e534af51678460961228e0e73e0733eaabd10f659abcec03bf904f111c9b42b52046f1b004e78ef6bad5a5922d442ffd5e4e79fec68227267f641e3ca1589e35ed33de2dc0df7452995eb9e6252c82a32be87c0a4201924e3cdf84923ade176a64cd94a2571b693d74aa7c7d5285c3b5f8f21f1e17285dbac1e4070419ec1d08af66f39f263aa6327d553cdac3edcb704c792e15e0a1eebcc", 0xbf}, 0x68) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x30, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x3, 0x30, 0xffffffffffffffff, 0x0) (async) 21:50:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/135) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x10) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) (async) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/105) 21:50:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000240)=""/160) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x9, 0x3ff]) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f00000001c0)=0xffff) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/69) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r2, 0xe694}) 21:50:26 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x513903, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x513903, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:26 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 21:50:26 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 21:50:26 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1406, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) 21:50:26 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 21:50:26 executing program 4: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)="862339d71f109a11feff1e05a179d0f4c3c8518fe76fccc6d35c0c5483458f996959d37ce33d8e534af51678460961228e0e73e0733eaabd10f659abcec03bf904f111c9b42b52046f1b004e78ef6bad5a5922d442ffd5e4e79fec68227267f641e3ca1589e35ed33de2dc0df7452995eb9e6252c82a32be87c0a4201924e3cdf84923ade176a64cd94a2571b693d74aa7c7d5285c3b5f8f21f1e17285dbac1e4070419ec1d08af66f39f263aa6327d553cdac3edcb704c792e15e0a1eebcc", 0xbf}, 0x68) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x30, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x3, 0x30, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)="862339d71f109a11feff1e05a179d0f4c3c8518fe76fccc6d35c0c5483458f996959d37ce33d8e534af51678460961228e0e73e0733eaabd10f659abcec03bf904f111c9b42b52046f1b004e78ef6bad5a5922d442ffd5e4e79fec68227267f641e3ca1589e35ed33de2dc0df7452995eb9e6252c82a32be87c0a4201924e3cdf84923ade176a64cd94a2571b693d74aa7c7d5285c3b5f8f21f1e17285dbac1e4070419ec1d08af66f39f263aa6327d553cdac3edcb704c792e15e0a1eebcc", 0xbf}, 0x68) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x30, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x3, 0x30, 0xffffffffffffffff, 0x0) (async) 21:50:26 executing program 0: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1044}, 0x81) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:26 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 21:50:27 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1406, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000240)=""/160) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x9, 0x3ff]) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f00000001c0)=0xffff) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async, rerun: 32) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/69) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r2, 0xe694}) 21:50:27 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 21:50:27 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 21:50:27 executing program 0: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1044}, 0x81) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:27 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x401, 0x381082) 21:50:27 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1406, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/49) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x102) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/222) 21:50:27 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 21:50:27 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) 21:50:27 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x401, 0x381082) 21:50:27 executing program 0: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1044}, 0x81) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/49) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x102) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/222) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/49) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x102) (async) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/222) (async) 21:50:27 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 21:50:27 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x401, 0x381082) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x401, 0x381082) (async) 21:50:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3fffffffff, 0x400081) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:27 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) 21:50:27 executing program 4: madvise(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/49) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x102) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/222) 21:50:27 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 21:50:27 executing program 3: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1e) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 21:50:27 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) 21:50:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3fffffffff, 0x400081) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:27 executing program 4: madvise(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4) 21:50:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3fffffffff, 0x400081) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/192) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:27 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 21:50:27 executing program 3: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1e) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 21:50:27 executing program 4: madvise(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4) 21:50:27 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) 21:50:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xeba1, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r2, r2, r2], &(0x7f0000000180)=[0x8, 0x8000000000000001, 0x10000, 0x7, 0x1], 0x3}) 21:50:27 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) (async) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/192) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:27 executing program 3: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1e) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) 21:50:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xeba1, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r2, r2, r2], &(0x7f0000000180)=[0x8, 0x8000000000000001, 0x10000, 0x7, 0x1], 0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0xeba1, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r2, r2, r2], &(0x7f0000000180)=[0x8, 0x8000000000000001, 0x10000, 0x7, 0x1], 0x3}) (async) 21:50:27 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) 21:50:27 executing program 4: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc71b987425f7cdef) 21:50:27 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40110, 0xffffffffffffffff, 0xe529) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/43) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/192) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x0) (async) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/192) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) (async) 21:50:27 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) recvfrom$rose(r0, &(0x7f0000000000)=""/32, 0x20, 0x40002000, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) 21:50:27 executing program 4: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc71b987425f7cdef) 21:50:27 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40110, 0xffffffffffffffff, 0xe529) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/43) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40110, 0xffffffffffffffff, 0xe529) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2}) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/43) (async) 21:50:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xeba1, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r2, r2, r2], &(0x7f0000000180)=[0x8, 0x8000000000000001, 0x10000, 0x7, 0x1], 0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0xeba1, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r2, r2, r2], &(0x7f0000000180)=[0x8, 0x8000000000000001, 0x10000, 0x7, 0x1], 0x3}) (async) 21:50:27 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) recvfrom$rose(r0, &(0x7f0000000000)=""/32, 0x20, 0x40002000, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) recvfrom$rose(r0, &(0x7f0000000000)=""/32, 0x20, 0x40002000, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) 21:50:27 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) 21:50:27 executing program 4: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc71b987425f7cdef) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc71b987425f7cdef) (async) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/206) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x47d1]) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x6900) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x7ff, 0x1c1001) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000001240)=""/11) 21:50:27 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40110, 0xffffffffffffffff, 0xe529) (async, rerun: 32) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2}) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async, rerun: 64) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/43) (rerun: 64) 21:50:27 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x33, 0x81, 0x0, 0x3, 0x0, 0x4e, 0x200, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2b, 0x1, @perf_bp, 0x6, 0xba2, 0xa8e, 0x9, 0x8000, 0xecd, 0x3, 0x0, 0x4494, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x8010, r0, 0x6) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 21:50:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x210901) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x100, 0x2d01) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)=0x6) 21:50:27 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 21:50:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/206) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x47d1]) (async) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x6900) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x7ff, 0x1c1001) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000001240)=""/11) 21:50:27 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) recvfrom$rose(r0, &(0x7f0000000000)=""/32, 0x20, 0x40002000, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) 21:50:27 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x33, 0x81, 0x0, 0x3, 0x0, 0x4e, 0x200, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2b, 0x1, @perf_bp, 0x6, 0xba2, 0xa8e, 0x9, 0x8000, 0xecd, 0x3, 0x0, 0x4494, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x8010, r0, 0x6) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 21:50:27 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 21:50:27 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 21:50:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x210901) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x100, 0x2d01) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)=0x6) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 21:50:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/206) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x47d1]) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x6900) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x7ff, 0x1c1001) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000001240)=""/11) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/206) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x47d1]) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x6900) (async) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/4096) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) syz_open_dev$evdev(&(0x7f00000001c0), 0x7ff, 0x1c1001) (async) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000001240)=""/11) (async) 21:50:28 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x33, 0x81, 0x0, 0x3, 0x0, 0x4e, 0x200, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2b, 0x1, @perf_bp, 0x6, 0xba2, 0xa8e, 0x9, 0x8000, 0xecd, 0x3, 0x0, 0x4494, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x8010, r0, 0x6) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 21:50:28 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 21:50:28 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 21:50:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x210901) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x100, 0x2d01) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)=0x6) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 21:50:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x140c, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x24000000) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:28 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20208400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1409, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x6b}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x804) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 21:50:28 executing program 5: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) 21:50:28 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 21:50:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x1f, 0x79, 0x4, 0x863, 0x3, 0x4}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/61) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) 21:50:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x140c, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x24000000) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:28 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20208400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1409, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x6b}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x804) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 21:50:28 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x1fd, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/164) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffa000/0x3000)=nil) 21:50:28 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff9, 0x200100) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil}) 21:50:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x1f, 0x79, 0x4, 0x863, 0x3, 0x4}) (async) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/61) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) 21:50:28 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20208400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1409, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x6b}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x804) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20208400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1409, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x6b}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x804) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) 21:50:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x140c, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x24000000) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (rerun: 32) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/142) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x1fd, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/164) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffa000/0x3000)=nil) 21:50:28 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff9, 0x200100) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil}) 21:50:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x1f, 0x79, 0x4, 0x863, 0x3, 0x4}) (async) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/61) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) 21:50:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x1fd, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/164) (async) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffa000/0x3000)=nil) 21:50:28 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff9, 0x200100) (rerun: 32) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil}) 21:50:28 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000280)={0x401, "1d2914fc858560c5d6741183eb3310df46a19222db81885f27a26aedb45edab9", 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)="674909f11edb3eb89932b6addcdb16c5b3c5a5e572977e26ba30f1c92c0238f217034bc4759e666ed6ed793f9ef38e46608b3200245a636d08b99485de64535856", 0x41, r0}, 0x68) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x5, 0x40000) mmap$snddsp_status(&(0x7f0000ff8000/0x3000)=nil, 0x1000, 0x2000008, 0x80010, r1, 0x82000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x80384a1938bdb350, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r2, 0x7fffffff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @ib={0x1b, 0x9, 0xdd6, {"172aa1630512e669f049c3e8629838b3"}, 0x8e, 0x4, 0x7}}}, 0x118) 21:50:28 executing program 4: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) 21:50:28 executing program 4: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) (async) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) (async) 21:50:28 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x4000)=nil) 21:50:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, r1, r2, 0x0, 0x0, 0x0, r3], &(0x7f0000000180)=[0x4, 0x90000000], 0x7, 0x6388deca4e14f9bd}) 21:50:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:28 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0xf35, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f95000/0x3000)=nil, &(0x7f0000c23000/0x1000)=nil, &(0x7f0000f86000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000081e000/0x1000)=nil, &(0x7f0000000040)="85a2e33fc4c3c602a8713845de8f4497383f761b741a1697b0dce02c17c099dc2419cd2e7aa1309a25ea279e69604a1a2d211ef11932cdc022c4784767fcc80fb1cf0ee5aa9a3ce152757e060c607730b91869bf0790d8c39250a68f4998c5028c6ad50dc5c83a0e3dfe4222f63785e32ac2688060dfd9839b937e37cdfe05dcf9aadb0fb4f0f985ed5ab3c42d", 0x8d, r0}, 0x68) madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xb) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) 21:50:28 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x4000)=nil) (rerun: 32) 21:50:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, r1, r2, 0x0, 0x0, 0x0, r3], &(0x7f0000000180)=[0x4, 0x90000000], 0x7, 0x6388deca4e14f9bd}) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) 21:50:28 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x4000)=nil) (async) 21:50:28 executing program 4: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) (async) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) (async) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) (async) 21:50:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, r1, r2, 0x0, 0x0, 0x0, r3], &(0x7f0000000180)=[0x4, 0x90000000], 0x7, 0x6388deca4e14f9bd}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, r1, r2, 0x0, 0x0, 0x0, r3], &(0x7f0000000180)=[0x4, 0x90000000], 0x7, 0x6388deca4e14f9bd}) (async) 21:50:28 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0xf35, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f95000/0x3000)=nil, &(0x7f0000c23000/0x1000)=nil, &(0x7f0000f86000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000081e000/0x1000)=nil, &(0x7f0000000040)="85a2e33fc4c3c602a8713845de8f4497383f761b741a1697b0dce02c17c099dc2419cd2e7aa1309a25ea279e69604a1a2d211ef11932cdc022c4784767fcc80fb1cf0ee5aa9a3ce152757e060c607730b91869bf0790d8c39250a68f4998c5028c6ad50dc5c83a0e3dfe4222f63785e32ac2688060dfd9839b937e37cdfe05dcf9aadb0fb4f0f985ed5ab3c42d", 0x8d, r0}, 0x68) madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xb) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 21:50:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) 21:50:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2244c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x12880) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000180)=[r2], &(0x7f00000001c0)=[0xfffffffffffffffe], 0x1, 0x1}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) recvfrom$rose(r3, &(0x7f00000011c0)=""/61, 0x3d, 0x42, &(0x7f0000001200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast, @default]}, 0x40) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000001240)=""/170, 0xaa, 0x0, &(0x7f0000001300)=""/4099, 0x1003}}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x8a, 0xe5, 0x5, 0x6, 0x34, 0x1, 0x20, 0x7, 0x8, 0x9, 0x8, 0x8}, 0xe) 21:50:28 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) socket$caif_seqpacket(0x25, 0x5, 0x1) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:50:28 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x46) 21:50:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2244c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x12880) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000180)=[r2], &(0x7f00000001c0)=[0xfffffffffffffffe], 0x1, 0x1}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) recvfrom$rose(r3, &(0x7f00000011c0)=""/61, 0x3d, 0x42, &(0x7f0000001200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast, @default]}, 0x40) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000001240)=""/170, 0xaa, 0x0, &(0x7f0000001300)=""/4099, 0x1003}}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x8a, 0xe5, 0x5, 0x6, 0x34, 0x1, 0x20, 0x7, 0x8, 0x9, 0x8, 0x8}, 0xe) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2244c0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)) (async) syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x12880) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000180)=[r2], &(0x7f00000001c0)=[0xfffffffffffffffe], 0x1, 0x1}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async) recvfrom$rose(r3, &(0x7f00000011c0)=""/61, 0x3d, 0x42, &(0x7f0000001200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast, @default]}, 0x40) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000001240)=""/170, 0xaa, 0x0, &(0x7f0000001300)=""/4099, 0x1003}}, 0x10) (async) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x8a, 0xe5, 0x5, 0x6, 0x34, 0x1, 0x20, 0x7, 0x8, 0x9, 0x8, 0x8}, 0xe) (async) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) socket$caif_seqpacket(0x25, 0x5, 0x1) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:50:28 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0xf35, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f95000/0x3000)=nil, &(0x7f0000c23000/0x1000)=nil, &(0x7f0000f86000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000081e000/0x1000)=nil, &(0x7f0000000040)="85a2e33fc4c3c602a8713845de8f4497383f761b741a1697b0dce02c17c099dc2419cd2e7aa1309a25ea279e69604a1a2d211ef11932cdc022c4784767fcc80fb1cf0ee5aa9a3ce152757e060c607730b91869bf0790d8c39250a68f4998c5028c6ad50dc5c83a0e3dfe4222f63785e32ac2688060dfd9839b937e37cdfe05dcf9aadb0fb4f0f985ed5ab3c42d", 0x8d, r0}, 0x68) madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xb) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 21:50:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x80, 0x7f, 0x8, 0x9}, {0x2, 0xff, 0xc4, 0xb02f85c}, {0x6, 0x1, 0x20, 0x9}, {0x8000, 0x93, 0x20, 0x10001}]}) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x301400) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x4) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x140f, 0x800, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040870) 21:50:28 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 21:50:28 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x46) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x46) (async) 21:50:28 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) socket$caif_seqpacket(0x25, 0x5, 0x1) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:50:28 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0xf35, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f95000/0x3000)=nil, &(0x7f0000c23000/0x1000)=nil, &(0x7f0000f86000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000081e000/0x1000)=nil, &(0x7f0000000040)="85a2e33fc4c3c602a8713845de8f4497383f761b741a1697b0dce02c17c099dc2419cd2e7aa1309a25ea279e69604a1a2d211ef11932cdc022c4784767fcc80fb1cf0ee5aa9a3ce152757e060c607730b91869bf0790d8c39250a68f4998c5028c6ad50dc5c83a0e3dfe4222f63785e32ac2688060dfd9839b937e37cdfe05dcf9aadb0fb4f0f985ed5ab3c42d", 0x8d, r0}, 0x68) madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xb) 21:50:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2244c0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x12880) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000180)=[r2], &(0x7f00000001c0)=[0xfffffffffffffffe], 0x1, 0x1}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) recvfrom$rose(r3, &(0x7f00000011c0)=""/61, 0x3d, 0x42, &(0x7f0000001200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast, @default]}, 0x40) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000001240)=""/170, 0xaa, 0x0, &(0x7f0000001300)=""/4099, 0x1003}}, 0x10) (async) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x8a, 0xe5, 0x5, 0x6, 0x34, 0x1, 0x20, 0x7, 0x8, 0x9, 0x8, 0x8}, 0xe) 21:50:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x80, 0x7f, 0x8, 0x9}, {0x2, 0xff, 0xc4, 0xb02f85c}, {0x6, 0x1, 0x20, 0x9}, {0x8000, 0x93, 0x20, 0x10001}]}) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x301400) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x4) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x140f, 0x800, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040870) 21:50:29 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) 21:50:29 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) (async) 21:50:29 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) 21:50:29 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x46) 21:50:29 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0xf35, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xb) 21:50:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x480282) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0x105680) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) 21:50:29 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffffff88) 21:50:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x80, 0x7f, 0x8, 0x9}, {0x2, 0xff, 0xc4, 0xb02f85c}, {0x6, 0x1, 0x20, 0x9}, {0x8000, 0x93, 0x20, 0x10001}]}) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x301400) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x4) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x140f, 0x800, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040870) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x80, 0x7f, 0x8, 0x9}, {0x2, 0xff, 0xc4, 0xb02f85c}, {0x6, 0x1, 0x20, 0x9}, {0x8000, 0x93, 0x20, 0x10001}]}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x301400) (async) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x4) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x140f, 0x800, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040870) (async) 21:50:29 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0xf35, 0x4) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xb) 21:50:29 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) 21:50:29 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffffff88) 21:50:29 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) socket$nl_rdma(0x10, 0x3, 0x14) 21:50:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x480282) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0x105680) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x480282) (async) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0x105680) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) (async) 21:50:29 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0xf35, 0x4) madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xb) 21:50:29 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0xc89f, 0x2, 0x5ff4, 0x9, 0x8001], 0x2, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x8001, 0x444400) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x600000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x5d24, 0x7]) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000240)=""/233) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:29 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffffff88) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffffff88) (async) 21:50:29 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) socket$nl_rdma(0x10, 0x3, 0x14) 21:50:29 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffa000/0x3000)=nil) 21:50:29 executing program 5: madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xb) 21:50:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x480282) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0x105680) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) (rerun: 32) 21:50:29 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x64) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) clock_gettime(0x5, &(0x7f0000000000)) 21:50:29 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffa000/0x3000)=nil) 21:50:29 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0xc89f, 0x2, 0x5ff4, 0x9, 0x8001], 0x2, 0x1}) (async) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x8001, 0x444400) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x600000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x5d24, 0x7]) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000240)=""/233) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:29 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) socket$nl_rdma(0x10, 0x3, 0x14) 21:50:29 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x64) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) (async) clock_gettime(0x5, &(0x7f0000000000)) 21:50:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x7f, 0x3], 0x1, 0x1}) 21:50:29 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0xc89f, 0x2, 0x5ff4, 0x9, 0x8001], 0x2, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x8001, 0x444400) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x600000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x5d24, 0x7]) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000240)=""/233) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0xc89f, 0x2, 0x5ff4, 0x9, 0x8001], 0x2, 0x1}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x8001, 0x444400) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x600000) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x5d24, 0x7]) (async) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000240)=""/233) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) 21:50:29 executing program 5: madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) 21:50:29 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffa000/0x3000)=nil) (rerun: 64) 21:50:29 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x64) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) clock_gettime(0x5, &(0x7f0000000000)) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x64) (async) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) (async) clock_gettime(0x5, &(0x7f0000000000)) (async) 21:50:29 executing program 3: getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:29 executing program 5: madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) 21:50:29 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x553a) 21:50:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async, rerun: 64) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (rerun: 64) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x7f, 0x3], 0x1, 0x1}) (rerun: 64) 21:50:29 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xcc, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1d}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 21:50:29 executing program 5: madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) 21:50:29 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x553a) 21:50:29 executing program 3: getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x464000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:29 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xcc, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1d}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 21:50:29 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf254c0023000f00a9007365636f6e646e616d650000b3e4d8deb34f8f10850069295bb3142c72ebcbdae22f518e7dfa81dac43e023a7e675d63918b74abb935f867b101b3f1290e70857bbf7cbf6c84998a8d595c7c0a668cfaa4cb6f7be2e09400"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget(0x0, 0x1000, 0x2, &(0x7f0000ff9000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1c820, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x24008081}, 0x40d4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) 21:50:29 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x553a) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x553a) (async) 21:50:29 executing program 3: getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (rerun: 32) 21:50:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x7f, 0x3], 0x1, 0x1}) 21:50:29 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xcc, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1d}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x4) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 21:50:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x464000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x1) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:29 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xe000, 0x2}) 21:50:29 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf254c0023000f00a9007365636f6e646e616d650000b3e4d8deb34f8f10850069295bb3142c72ebcbdae22f518e7dfa81dac43e023a7e675d63918b74abb935f867b101b3f1290e70857bbf7cbf6c84998a8d595c7c0a668cfaa4cb6f7be2e09400"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget(0x0, 0x1000, 0x2, &(0x7f0000ff9000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1c820, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x24008081}, 0x40d4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x5fd442, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) shmget(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x2, 0x30, r3, 0x82000000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) 21:50:29 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 21:50:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x111000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x100010, r2, 0x0) 21:50:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x464000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:29 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async, rerun: 32) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xe000, 0x2}) 21:50:29 executing program 4: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 21:50:29 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf254c0023000f00a9007365636f6e646e616d650000b3e4d8deb34f8f10850069295bb3142c72ebcbdae22f518e7dfa81dac43e023a7e675d63918b74abb935f867b101b3f1290e70857bbf7cbf6c84998a8d595c7c0a668cfaa4cb6f7be2e09400"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget(0x0, 0x1000, 0x2, &(0x7f0000ff9000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1c820, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x24008081}, 0x40d4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x5fd442, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) shmget(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x2, 0x30, r3, 0x82000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) 21:50:29 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 21:50:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x111000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x100010, r2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x111000) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x100010, r2, 0x0) (async) 21:50:29 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xe000, 0x2}) 21:50:30 executing program 4: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/32) 21:50:30 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 21:50:30 executing program 4: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 21:50:30 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xf1, 0x680240) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x3) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 21:50:30 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd9ddcfe1d473d40a}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x140e, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c045) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x280000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x111000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x100010, r2, 0x0) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/32) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) (async) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/32) (async) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil}) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/196) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000c8b000/0x1000)=nil, &(0x7f0000c8e000/0x2000)=nil, &(0x7f0000c4d000/0x2000)=nil, &(0x7f0000dc7000/0x3000)=nil, &(0x7f0000e1f000/0x2000)=nil, &(0x7f0000fc1000/0x1000)=nil, &(0x7f0000db9000/0x1000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000d54000/0x4000)=nil, &(0x7f0000000100)="fbd51ac14dda8a7e7beb49994fee0c3402d1a37bd340cb38c4", 0x19, r0}, 0x68) 21:50:30 executing program 4: getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 21:50:30 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xf1, 0x680240) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x3) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 21:50:30 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/4096) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil}) (async, rerun: 64) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/196) (async, rerun: 64) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000c8b000/0x1000)=nil, &(0x7f0000c8e000/0x2000)=nil, &(0x7f0000c4d000/0x2000)=nil, &(0x7f0000dc7000/0x3000)=nil, &(0x7f0000e1f000/0x2000)=nil, &(0x7f0000fc1000/0x1000)=nil, &(0x7f0000db9000/0x1000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000d54000/0x4000)=nil, &(0x7f0000000100)="fbd51ac14dda8a7e7beb49994fee0c3402d1a37bd340cb38c4", 0x19, r0}, 0x68) 21:50:30 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xf1, 0x680240) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x3) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 21:50:30 executing program 4: getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8a0, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) 21:50:30 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil}) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/196) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000c8b000/0x1000)=nil, &(0x7f0000c8e000/0x2000)=nil, &(0x7f0000c4d000/0x2000)=nil, &(0x7f0000dc7000/0x3000)=nil, &(0x7f0000e1f000/0x2000)=nil, &(0x7f0000fc1000/0x1000)=nil, &(0x7f0000db9000/0x1000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000d54000/0x4000)=nil, &(0x7f0000000100)="fbd51ac14dda8a7e7beb49994fee0c3402d1a37bd340cb38c4", 0x19, r0}, 0x68) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil}) (async) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/196) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000c8b000/0x1000)=nil, &(0x7f0000c8e000/0x2000)=nil, &(0x7f0000c4d000/0x2000)=nil, &(0x7f0000dc7000/0x3000)=nil, &(0x7f0000e1f000/0x2000)=nil, &(0x7f0000fc1000/0x1000)=nil, &(0x7f0000db9000/0x1000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000d54000/0x4000)=nil, &(0x7f0000000100)="fbd51ac14dda8a7e7beb49994fee0c3402d1a37bd340cb38c4", 0x19, r0}, 0x68) (async) 21:50:30 executing program 4: getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/32) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) (async) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/32) (async) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x2000)=nil) 21:50:30 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r3, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0xfffffffffffffff6, 0x5, 0x0, 0x5], 0x6, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x8000, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000480)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000340)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000003c0)={&(0x7f0000000380)=[r5, r3, r3, r6, r3, r7, r8], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[r9, r7, r3], &(0x7f00000004c0), 0x3, 0x1}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8a0, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8a0, 0x10000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) (async) 21:50:30 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x4, 0x20010, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x8, 0x4000010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) epoll_create(0x2) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) 21:50:30 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r3, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0xfffffffffffffff6, 0x5, 0x0, 0x5], 0x6, 0x1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x8000, 0x100) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r0}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000480)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000340)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000003c0)={&(0x7f0000000380)=[r5, r3, r3, r6, r3, r7, r8], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[r9, r7, r3], &(0x7f00000004c0), 0x3, 0x1}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x2000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x2000)=nil) (async) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)="3371458200457f6f14ce3b1afccbd6a4755b02fe44e490e4f785c1e0179b3733e6b175a26d41e43e1e785c684c1be46e8d7f999eab1e0d6f1fc0b2b6adbb61d37a0944b733caaa2749", 0x49, r2}, 0x68) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:30 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x4, 0x20010, r0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x8, 0x4000010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) epoll_create(0x2) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8a0, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8a0, 0x10000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) (async) 21:50:30 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)="3371458200457f6f14ce3b1afccbd6a4755b02fe44e490e4f785c1e0179b3733e6b175a26d41e43e1e785c684c1be46e8d7f999eab1e0d6f1fc0b2b6adbb61d37a0944b733caaa2749", 0x49, r2}, 0x68) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:30 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async, rerun: 64) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) (rerun: 64) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r3, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0xfffffffffffffff6, 0x5, 0x0, 0x5], 0x6, 0x1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x8000, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000480)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r2}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000340)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000003c0)={&(0x7f0000000380)=[r5, r3, r3, r6, r3, r7, r8], 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[r9, r7, r3], &(0x7f00000004c0), 0x3, 0x1}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x2000)=nil) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x400000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x4, 0x5, 0x7d, 0x7f, 0x0, 0x401, 0x22000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xb12, 0xffffffffffffff00}, 0x506, 0xeb, 0x4, 0x9, 0x4205, 0x200, 0x200, 0x0, 0x4, 0x0, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x840000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000180)={r3}) 21:50:30 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)="3371458200457f6f14ce3b1afccbd6a4755b02fe44e490e4f785c1e0179b3733e6b175a26d41e43e1e785c684c1be46e8d7f999eab1e0d6f1fc0b2b6adbb61d37a0944b733caaa2749", 0x49, r2}, 0x68) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)) 21:50:30 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x4, 0x20010, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x8, 0x4000010, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) epoll_create(0x2) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 21:50:30 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x400000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x4, 0x5, 0x7d, 0x7f, 0x0, 0x401, 0x22000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xb12, 0xffffffffffffff00}, 0x506, 0xeb, 0x4, 0x9, 0x4205, 0x200, 0x200, 0x0, 0x4, 0x0, 0x9}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x840000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000180)={r3}) 21:50:30 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080)="c0f95a7e64b14118ff68488004e3651c72f8bdb9dda7f63b7c501772013da9a42d8aea35325616ef6cfaf2e3bdc99ab7490d16f36528ba1d07892552bbd12652ec", 0x41, r1}, 0x68) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xf410, 0x1, 0x6, 0x7, 0x6, 0x80000001}) r2 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x9000, 0x2}) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) 21:50:30 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa74d}, {0x6, 0x11, 0x1f}, {0x8, 0x13, 0xfff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x825}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x401}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/239) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080)="c0f95a7e64b14118ff68488004e3651c72f8bdb9dda7f63b7c501772013da9a42d8aea35325616ef6cfaf2e3bdc99ab7490d16f36528ba1d07892552bbd12652ec", 0x41, r1}, 0x68) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xf410, 0x1, 0x6, 0x7, 0x6, 0x80000001}) r2 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x9000, 0x2}) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x400000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x4, 0x5, 0x7d, 0x7f, 0x0, 0x401, 0x22000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xb12, 0xffffffffffffff00}, 0x506, 0xeb, 0x4, 0x9, 0x4205, 0x200, 0x200, 0x0, 0x4, 0x0, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x840000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000180)={r3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x400000) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x4, 0x5, 0x7d, 0x7f, 0x0, 0x401, 0x22000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xb12, 0xffffffffffffff00}, 0x506, 0xeb, 0x4, 0x9, 0x4205, 0x200, 0x200, 0x0, 0x4, 0x0, 0x9}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x840000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000180)={r3}) (async) 21:50:30 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa74d}, {0x6, 0x11, 0x1f}, {0x8, 0x13, 0xfff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x825}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x401}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x2, 0x0) (async) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) (async) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/239) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080)="c0f95a7e64b14118ff68488004e3651c72f8bdb9dda7f63b7c501772013da9a42d8aea35325616ef6cfaf2e3bdc99ab7490d16f36528ba1d07892552bbd12652ec", 0x41, r1}, 0x68) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xf410, 0x1, 0x6, 0x7, 0x6, 0x80000001}) r2 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x9000, 0x2}) 21:50:30 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x3000004, 0x13, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10201, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000e4aab0327bd7000fedbdf25080001000200000008003c000400000e08000100000028c44ab90000adfb3536274d85c3927fe137a4fa363e5b99c82122060000005d180be0932a28f40897e21be682357fdacb9708bf883d840232e36798908a6079ca74ee7845f6c226fdb1073411ff29c9a4d1d19677edc8df472e20c819f91b135393f1c9e5d41b687a3501b15f96cbc1eb5da5f4ad90af7075cdad9d6ca3c61996a1cd3ecd313f1dc74b0835cae5baadc5b8729b0319e7a905f520a8d331fd4932fb2bef48428712f254fe462d9bb52aeaeca9dc85bf92ef772dd4585557063de6fe736f47797ebbc23863325db6836dcf"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 21:50:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001040), 0xffffffffffffffff, 0x20200) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000010c0)=[{{0x0, 0xea60}, 0x4, 0x1, 0x8}, {{0x0, 0xea60}, 0x3, 0x8000, 0xef34}, {{0x77359400}, 0x1, 0x7, 0x5}, {{0x0, 0xea60}, 0x17, 0x5, 0x3}, {{r1, r2/1000+60000}, 0x0, 0x6, 0xffffffff}], 0x78) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0x1018, 0x1, 0x9, 0x1, "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"}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) 21:50:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x380) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/229) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000140)=0x8) 21:50:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000e4aab0327bd7000fedbdf25080001000200000008003c000400000e08000100000028c44ab90000adfb3536274d85c3927fe137a4fa363e5b99c82122060000005d180be0932a28f40897e21be682357fdacb9708bf883d840232e36798908a6079ca74ee7845f6c226fdb1073411ff29c9a4d1d19677edc8df472e20c819f91b135393f1c9e5d41b687a3501b15f96cbc1eb5da5f4ad90af7075cdad9d6ca3c61996a1cd3ecd313f1dc74b0835cae5baadc5b8729b0319e7a905f520a8d331fd4932fb2bef48428712f254fe462d9bb52aeaeca9dc85bf92ef772dd4585557063de6fe736f47797ebbc23863325db6836dcf"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x10000, 0x4) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000e4aab0327bd7000fedbdf25080001000200000008003c000400000e08000100000028c44ab90000adfb3536274d85c3927fe137a4fa363e5b99c82122060000005d180be0932a28f40897e21be682357fdacb9708bf883d840232e36798908a6079ca74ee7845f6c226fdb1073411ff29c9a4d1d19677edc8df472e20c819f91b135393f1c9e5d41b687a3501b15f96cbc1eb5da5f4ad90af7075cdad9d6ca3c61996a1cd3ecd313f1dc74b0835cae5baadc5b8729b0319e7a905f520a8d331fd4932fb2bef48428712f254fe462d9bb52aeaeca9dc85bf92ef772dd4585557063de6fe736f47797ebbc23863325db6836dcf"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) 21:50:31 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa74d}, {0x6, 0x11, 0x1f}, {0x8, 0x13, 0xfff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x825}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x401}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x2, 0x0) (async) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) (async) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/239) 21:50:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x380) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/229) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000140)=0x8) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x380) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/229) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000140)=0x8) (async) 21:50:31 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x3000004, 0x13, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10201, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 21:50:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001040), 0xffffffffffffffff, 0x20200) (async) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000010c0)=[{{0x0, 0xea60}, 0x4, 0x1, 0x8}, {{0x0, 0xea60}, 0x3, 0x8000, 0xef34}, {{0x77359400}, 0x1, 0x7, 0x5}, {{0x0, 0xea60}, 0x17, 0x5, 0x3}, {{r1, r2/1000+60000}, 0x0, 0x6, 0xffffffff}], 0x78) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0x1018, 0x1, 0x9, 0x1, "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"}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:31 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) 21:50:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000e4aab0327bd7000fedbdf25080001000200000008003c000400000e08000100000028c44ab90000adfb3536274d85c3927fe137a4fa363e5b99c82122060000005d180be0932a28f40897e21be682357fdacb9708bf883d840232e36798908a6079ca74ee7845f6c226fdb1073411ff29c9a4d1d19677edc8df472e20c819f91b135393f1c9e5d41b687a3501b15f96cbc1eb5da5f4ad90af7075cdad9d6ca3c61996a1cd3ecd313f1dc74b0835cae5baadc5b8729b0319e7a905f520a8d331fd4932fb2bef48428712f254fe462d9bb52aeaeca9dc85bf92ef772dd4585557063de6fe736f47797ebbc23863325db6836dcf"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x10000, 0x4) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000e4aab0327bd7000fedbdf25080001000200000008003c000400000e08000100000028c44ab90000adfb3536274d85c3927fe137a4fa363e5b99c82122060000005d180be0932a28f40897e21be682357fdacb9708bf883d840232e36798908a6079ca74ee7845f6c226fdb1073411ff29c9a4d1d19677edc8df472e20c819f91b135393f1c9e5d41b687a3501b15f96cbc1eb5da5f4ad90af7075cdad9d6ca3c61996a1cd3ecd313f1dc74b0835cae5baadc5b8729b0319e7a905f520a8d331fd4932fb2bef48428712f254fe462d9bb52aeaeca9dc85bf92ef772dd4585557063de6fe736f47797ebbc23863325db6836dcf"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) 21:50:31 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/4096) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000001080)={r2, r1, 0x3}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x380) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/229) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000140)=0x8) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x380) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/229) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000140)=0x8) (async) 21:50:31 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x3000004, 0x13, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10201, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 21:50:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001040), 0xffffffffffffffff, 0x20200) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000010c0)=[{{0x0, 0xea60}, 0x4, 0x1, 0x8}, {{0x0, 0xea60}, 0x3, 0x8000, 0xef34}, {{0x77359400}, 0x1, 0x7, 0x5}, {{0x0, 0xea60}, 0x17, 0x5, 0x3}, {{r1, r2/1000+60000}, 0x0, 0x6, 0xffffffff}], 0x78) (async) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0x1018, 0x1, 0x9, 0x1, "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"}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:31 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) 21:50:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x20000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80180, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)) 21:50:31 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8055000900"/18, @ANYRES16=r1, @ANYBLOB="010000000000000000004c000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xa4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5c4}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4b3c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004800}, 0x20008005) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x142) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000040)=""/144) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) 21:50:31 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/4096) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000001080)={r2, r1, 0x3}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:31 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x242100, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x1000)=nil) 21:50:31 executing program 5: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) 21:50:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x40800) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xb7, 0x4, 0x8, 0x8001, 0x8, 0x1ff}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x20000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80180, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x20000) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80180, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)) (async) 21:50:31 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/4096) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000001080)={r2, r1, 0x3}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:31 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x242100, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x1000)=nil) 21:50:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x40800) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xb7, 0x4, 0x8, 0x8001, 0x8, 0x1ff}) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:31 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8055000900"/18, @ANYRES16=r1, @ANYBLOB="010000000000000000004c000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xa4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5c4}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4b3c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004800}, 0x20008005) (async, rerun: 64) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x142) (rerun: 64) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000040)=""/144) (async, rerun: 32) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (rerun: 32) 21:50:31 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="f56b511dc01ad0", 0x7}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x503f00) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/245) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) 21:50:31 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x242100, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x1000)=nil) 21:50:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x20000) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80180, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)) 21:50:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x40800) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xb7, 0x4, 0x8, 0x8001, 0x8, 0x1ff}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x40800) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xb7, 0x4, 0x8, 0x8001, 0x8, 0x1ff}) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) 21:50:31 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="f56b511dc01ad0", 0x7}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:31 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000001}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x140c, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:31 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000080)=""/187, 0xbb, 0x0, &(0x7f0000000140)=""/72, 0x48}}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x8001, 0x100) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x0, 0xfffffffc]) 21:50:31 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8055000900"/18, @ANYRES16=r1, @ANYBLOB="010000000000000000004c000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xa4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5c4}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4b3c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004800}, 0x20008005) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x142) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000040)=""/144) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8055000900"/18, @ANYRES16=r1, @ANYBLOB="010000000000000000004c000000"], 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xa4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5c4}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4b3c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004800}, 0x20008005) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x142) (async) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000040)=""/144) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) 21:50:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x503f00) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/245) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) 21:50:31 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x82000000) 21:50:31 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="f56b511dc01ad0", 0x7}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:31 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000001}) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x800) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x140c, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x503f00) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/245) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) 21:50:31 executing program 0: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) 21:50:31 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000080)=""/187, 0xbb, 0x0, &(0x7f0000000140)=""/72, 0x48}}, 0x10) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x8001, 0x100) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x0, 0xfffffffc]) 21:50:31 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="f56b511dc01ad0", 0x7}, 0x68) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:31 executing program 0: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) (async) 21:50:31 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x82000000) 21:50:31 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000001}) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x140c, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x503f00) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/245) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) 21:50:31 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="f56b511dc01ad0", 0x7}, 0x68) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:31 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000080)=""/187, 0xbb, 0x0, &(0x7f0000000140)=""/72, 0x48}}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x8001, 0x100) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x0, 0xfffffffc]) 21:50:31 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="f56b511dc01ad0", 0x7}, 0x68) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:31 executing program 0: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) 21:50:31 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x82000000) 21:50:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x503f00) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/245) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) 21:50:31 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="3f02858f65dff85371be7543a700df338aeed2ecbcc1e148019ead4b474102017deca10ea2cfff3e877e6d423883088ee6c9542b81af12f2fa69e5f7f58c12fa72162a80d1e065a061c6a0d7dda65f78ed1549bd4d667303779710c07e98fe8f3ff43915022a010fe74f57c589f939d51771831ecfc3e3cd5d14ada1e33917722c9ab5802616230457e7608b1207d31dfa9869135c4f3727a7f89376a0f8a0", 0x9f, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c8", 0x1, 0xffffffffffffffff) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000480)={0x1, 0x8001, 0xffff8000, 0x8c37, 0x1, 0x6}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000480)) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r2}, &(0x7f0000000280)=""/78, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r0, 0x0, r2}, &(0x7f0000000200)=""/238, 0xee, &(0x7f0000000400)={&(0x7f0000000300)={'ghash-clmulni\x00'}, &(0x7f0000000340)="289ea99cc604863a1abed0e596e7a98f6c9a8314f46aae2090bb0d0081f78445b00dec733e7d80eaf5a9c970d3acfb2510cbd56c991b43ea72c51aed03c76e7ced3938c6b080e3374391857d60e68b4b0fef62630250183f0d7aa7854adcdaafb6d03867e2dfef31d87d0c117f96205e86edfb9d48e7fa8f86edead4afd51f00ae3100c69ebce8eedc670b26410ced43a3c3a9cd476ac7720bcf", 0x9a}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 21:50:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4044000}, 0x4800) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)=0x1000000) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0xd) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000480)=0x8) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x61, 0x0) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000240)=""/240) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000340)=""/196) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x1, 0xfffffffc, 0x40, 0x3f, 0x4, 0x400}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:31 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x115640, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r2, 0x9, 0x80000}) 21:50:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x503f00) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/245) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) 21:50:31 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="3f02858f65dff85371be7543a700df338aeed2ecbcc1e148019ead4b474102017deca10ea2cfff3e877e6d423883088ee6c9542b81af12f2fa69e5f7f58c12fa72162a80d1e065a061c6a0d7dda65f78ed1549bd4d667303779710c07e98fe8f3ff43915022a010fe74f57c589f939d51771831ecfc3e3cd5d14ada1e33917722c9ab5802616230457e7608b1207d31dfa9869135c4f3727a7f89376a0f8a0", 0x9f, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c8", 0x1, 0xffffffffffffffff) (async) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000480)={0x1, 0x8001, 0xffff8000, 0x8c37, 0x1, 0x6}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000480)) (async) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r2}, &(0x7f0000000280)=""/78, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) (async) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r0, 0x0, r2}, &(0x7f0000000200)=""/238, 0xee, &(0x7f0000000400)={&(0x7f0000000300)={'ghash-clmulni\x00'}, &(0x7f0000000340)="289ea99cc604863a1abed0e596e7a98f6c9a8314f46aae2090bb0d0081f78445b00dec733e7d80eaf5a9c970d3acfb2510cbd56c991b43ea72c51aed03c76e7ced3938c6b080e3374391857d60e68b4b0fef62630250183f0d7aa7854adcdaafb6d03867e2dfef31d87d0c117f96205e86edfb9d48e7fa8f86edead4afd51f00ae3100c69ebce8eedc670b26410ced43a3c3a9cd476ac7720bcf", 0x9a}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 21:50:31 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:31 executing program 3: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4044000}, 0x4800) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) (async) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)=0x1000000) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0xd) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000480)=0x8) (async) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x61, 0x0) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000240)=""/240) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) (async) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000340)=""/196) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x1, 0xfffffffc, 0x40, 0x3f, 0x4, 0x400}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:31 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) (async, rerun: 32) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) (async, rerun: 32) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x115640, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r2, 0x9, 0x80000}) 21:50:31 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x503f00) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) 21:50:31 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:32 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="3f02858f65dff85371be7543a700df338aeed2ecbcc1e148019ead4b474102017deca10ea2cfff3e877e6d423883088ee6c9542b81af12f2fa69e5f7f58c12fa72162a80d1e065a061c6a0d7dda65f78ed1549bd4d667303779710c07e98fe8f3ff43915022a010fe74f57c589f939d51771831ecfc3e3cd5d14ada1e33917722c9ab5802616230457e7608b1207d31dfa9869135c4f3727a7f89376a0f8a0", 0x9f, 0xffffffffffffffff) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c8", 0x1, 0xffffffffffffffff) (async) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000480)={0x1, 0x8001, 0xffff8000, 0x8c37, 0x1, 0x6}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000480)) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r2}, &(0x7f0000000280)=""/78, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) (async) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r0, 0x0, r2}, &(0x7f0000000200)=""/238, 0xee, &(0x7f0000000400)={&(0x7f0000000300)={'ghash-clmulni\x00'}, &(0x7f0000000340)="289ea99cc604863a1abed0e596e7a98f6c9a8314f46aae2090bb0d0081f78445b00dec733e7d80eaf5a9c970d3acfb2510cbd56c991b43ea72c51aed03c76e7ced3938c6b080e3374391857d60e68b4b0fef62630250183f0d7aa7854adcdaafb6d03867e2dfef31d87d0c117f96205e86edfb9d48e7fa8f86edead4afd51f00ae3100c69ebce8eedc670b26410ced43a3c3a9cd476ac7720bcf", 0x9a}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 21:50:32 executing program 3: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:32 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) (async) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x115640, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r2, 0x9, 0x80000}) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4044000}, 0x4800) (async) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)=0x1000000) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async, rerun: 32) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0xd) (async, rerun: 32) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async, rerun: 32) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000480)=0x8) (rerun: 32) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) (async, rerun: 32) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x61, 0x0) (rerun: 32) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000240)=""/240) (async) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) (async) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000340)=""/196) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x1, 0xfffffffc, 0x40, 0x3f, 0x4, 0x400}) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:32 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:32 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) 21:50:32 executing program 3: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:32 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:32 executing program 0: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x6, [@default, @default, @default, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:32 executing program 3: mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = userfaultfd(0xc00) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x3}) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x7) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/20) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)) 21:50:32 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) 21:50:32 executing program 0: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x6, [@default, @default, @default, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x7) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/20) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x7) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/20) (async) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)) (async) 21:50:32 executing program 3: mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) r0 = userfaultfd(0xc00) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x3}) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:32 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:32 executing program 3: mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = userfaultfd(0xc00) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) (async, rerun: 32) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x3}) (rerun: 32) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000080)=[r1, 0x0], &(0x7f0000000100)=[0x3ff, 0x0, 0x8001, 0x100, 0x1, 0x6], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000003c0)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r4, r1, r1, r1, r1, r5], &(0x7f00000004c0)=[0x4ce9], 0x6, 0x1}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd4, 0xa8, @random="753732923dcc5cb2ced79a09038d79bbb33bb8cb996974edbbff98556a1fe0f3ad2217bd1abb441653fceff53840e721baadfef5ebeb2a8a497900500fca1465fa71cb700113b18a89ec2bdfa10726861a26af27d3d239f3d51ade6a0e189bce77816bb1eda64479b4d1c13fa8f3ba125cd85446f0e1db506c0fd6c5c67f14ccc4436404b6376fe30069b6d54c7efc03bd9fd45df88e29fc5ffcec6ecb0596e0aea790e5209068ebefe326aaebd1c432677c2efa4032386413d44d930c4d5dcbe4bb548145035a5bd65140ee009e87c7"}]}, 0x104}, 0x1, 0x0, 0x0, 0x44005}, 0x24000000) 21:50:32 executing program 0: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x6, [@default, @default, @default, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x6, [@default, @default, @default, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:32 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) 21:50:32 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x7) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/20) (async) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)) 21:50:32 executing program 0: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000080)=[r1, 0x0], &(0x7f0000000100)=[0x3ff, 0x0, 0x8001, 0x100, 0x1, 0x6], 0x2, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000003c0)) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r4, r1, r1, r1, r1, r5], &(0x7f00000004c0)=[0x4ce9], 0x6, 0x1}) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd4, 0xa8, @random="753732923dcc5cb2ced79a09038d79bbb33bb8cb996974edbbff98556a1fe0f3ad2217bd1abb441653fceff53840e721baadfef5ebeb2a8a497900500fca1465fa71cb700113b18a89ec2bdfa10726861a26af27d3d239f3d51ade6a0e189bce77816bb1eda64479b4d1c13fa8f3ba125cd85446f0e1db506c0fd6c5c67f14ccc4436404b6376fe30069b6d54c7efc03bd9fd45df88e29fc5ffcec6ecb0596e0aea790e5209068ebefe326aaebd1c432677c2efa4032386413d44d930c4d5dcbe4bb548145035a5bd65140ee009e87c7"}]}, 0x104}, 0x1, 0x0, 0x0, 0x44005}, 0x24000000) 21:50:32 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000080)=[r1, 0x0], &(0x7f0000000100)=[0x3ff, 0x0, 0x8001, 0x100, 0x1, 0x6], 0x2, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000003c0)) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000400)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r4, r1, r1, r1, r1, r5], &(0x7f00000004c0)=[0x4ce9], 0x6, 0x1}) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd4, 0xa8, @random="753732923dcc5cb2ced79a09038d79bbb33bb8cb996974edbbff98556a1fe0f3ad2217bd1abb441653fceff53840e721baadfef5ebeb2a8a497900500fca1465fa71cb700113b18a89ec2bdfa10726861a26af27d3d239f3d51ade6a0e189bce77816bb1eda64479b4d1c13fa8f3ba125cd85446f0e1db506c0fd6c5c67f14ccc4436404b6376fe30069b6d54c7efc03bd9fd45df88e29fc5ffcec6ecb0596e0aea790e5209068ebefe326aaebd1c432677c2efa4032386413d44d930c4d5dcbe4bb548145035a5bd65140ee009e87c7"}]}, 0x104}, 0x1, 0x0, 0x0, 0x44005}, 0x24000000) 21:50:32 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x400040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfb1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @jmp={0x5, 0x1, 0x8, 0x0, 0x0, 0x4, 0x10}, @jmp={0x5, 0x0, 0x0, 0x2, 0x6, 0x80, 0xffffffffffffffe9}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x77, &(0x7f0000000180)=""/119, 0x40f00, 0x1, '\x00', 0x0, 0x15, r1, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x8, 0xa, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r2, r3, 0x1, r4, 0xffffffffffffffff]}, 0x80) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x4000)=nil) 21:50:32 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 0: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0xf1, 0xf3, 0x4, 0x223, 0x9, 0xfffffffd}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xfff) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0xffffffff]) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x7ff) 21:50:32 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x115640, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r2, 0x9, 0x80000}) 21:50:32 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x400040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfb1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @jmp={0x5, 0x1, 0x8, 0x0, 0x0, 0x4, 0x10}, @jmp={0x5, 0x0, 0x0, 0x2, 0x6, 0x80, 0xffffffffffffffe9}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x77, &(0x7f0000000180)=""/119, 0x40f00, 0x1, '\x00', 0x0, 0x15, r1, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x8, 0xa, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r2, r3, 0x1, r4, 0xffffffffffffffff]}, 0x80) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x4000)=nil) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0xf1, 0xf3, 0x4, 0x223, 0x9, 0xfffffffd}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xfff) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0xffffffff]) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x7ff) 21:50:32 executing program 0: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:50:32 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x400040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfb1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @jmp={0x5, 0x1, 0x8, 0x0, 0x0, 0x4, 0x10}, @jmp={0x5, 0x0, 0x0, 0x2, 0x6, 0x80, 0xffffffffffffffe9}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x77, &(0x7f0000000180)=""/119, 0x40f00, 0x1, '\x00', 0x0, 0x15, r1, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x8, 0xa, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r2, r3, 0x1, r4, 0xffffffffffffffff]}, 0x80) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x4000)=nil) 21:50:32 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x115640, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r2, 0x9, 0x80000}) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0xf1, 0xf3, 0x4, 0x223, 0x9, 0xfffffffd}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xfff) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0xffffffff]) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x7ff) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0xf1, 0xf3, 0x4, 0x223, 0x9, 0xfffffffd}) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xfff) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0xffffffff]) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x7ff) (async) 21:50:32 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x115640, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r2, 0x9, 0x80000}) 21:50:32 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r1 = getpgid(0x0) syz_open_dev$dri(&(0x7f0000000140), 0x707, 0x481000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x90000000000, 0x8100) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil}) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r3, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x7}) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/194) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 21:50:32 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x115640, 0x0) 21:50:32 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0xe00) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x7fffffff) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:32 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r1 = getpgid(0x0) syz_open_dev$dri(&(0x7f0000000140), 0x707, 0x481000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x90000000000, 0x8100) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil}) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r3, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x7}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) userfaultfd(0x80000) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) getpgid(0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x707, 0x481000) (async) syz_open_dev$dri(&(0x7f0000000180), 0x90000000000, 0x8100) (async) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil}) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) (async) gettid() (async) kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r3, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x7}) (async) 21:50:32 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/194) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:32 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async, rerun: 64) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) r1 = getpgid(0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x707, 0x481000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x90000000000, 0x8100) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil}) (async) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r3, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x7}) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0xe00) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (rerun: 32) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async, rerun: 64) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x7fffffff) (async, rerun: 64) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:32 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:32 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x10, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4000800) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:50:32 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/194) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 21:50:32 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x811) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x35b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x10280) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000180)) 21:50:32 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0xe00) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x7fffffff) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0xe00) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x7fffffff) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:32 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 21:50:32 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x10, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4000800) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:50:32 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x811) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x35b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x10280) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000180)) 21:50:32 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x10, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4000800) (async, rerun: 64) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:50:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async) 21:50:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0xfa, 0x10001]) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x80140) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:32 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x811) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x35b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x10280) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000180)) 21:50:32 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x39, 0xa9, @random="be0ef175acfdd193748e9d95fbb4a2a8b147ca99094709428a0872ef325b620b744e08354581a363c051602a841b1879d8c100e351"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb6}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5b, 0xa8, @random="411e950601dc9cfc9bbdeb775ef8ed16b8972c76c0852c69ee866135cf8eb3bb224d1b8609edb180101a637b41b6548e56c5412edb299cc73f2bdfe7940ef846040233256b89d9688c002cf3cce498860d3a46ac8bb5da"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x41) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x82000000) 21:50:32 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 21:50:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:32 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x39, 0xa9, @random="be0ef175acfdd193748e9d95fbb4a2a8b147ca99094709428a0872ef325b620b744e08354581a363c051602a841b1879d8c100e351"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb6}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5b, 0xa8, @random="411e950601dc9cfc9bbdeb775ef8ed16b8972c76c0852c69ee866135cf8eb3bb224d1b8609edb180101a637b41b6548e56c5412edb299cc73f2bdfe7940ef846040233256b89d9688c002cf3cce498860d3a46ac8bb5da"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x41) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x82000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x39, 0xa9, @random="be0ef175acfdd193748e9d95fbb4a2a8b147ca99094709428a0872ef325b620b744e08354581a363c051602a841b1879d8c100e351"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb6}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5b, 0xa8, @random="411e950601dc9cfc9bbdeb775ef8ed16b8972c76c0852c69ee866135cf8eb3bb224d1b8609edb180101a637b41b6548e56c5412edb299cc73f2bdfe7940ef846040233256b89d9688c002cf3cce498860d3a46ac8bb5da"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x41) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x82000000) (async) 21:50:32 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x3, 0x20, 0xff, 0x5}, {0x81, 0x4, 0x2, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={0x0, 0x400, 0x9}) 21:50:32 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x62080) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x8, 0x6, 0x7, 0x6, 0x6, 0xc848}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000ffd000/0x2000)=nil}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0xfa, 0x10001]) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x80140) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0xfa, 0x10001]) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x80140) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) 21:50:32 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r0, @ANYBLOB="080029bd7000fddbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000b4e5ff47794ccb86137140d40e41a92f2831dc24723abc7768c2cb9a8cde0f856b5e5ab6aa636702ee1a4eae667254f9f32ff9f33eee71cd53ec40a4cc6ef6285214877f6ee421e5715ea2b7fdd964df3f7e6832879b2ab25063288b338453"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x811) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x35b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x10280) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000180)) 21:50:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:32 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x39, 0xa9, @random="be0ef175acfdd193748e9d95fbb4a2a8b147ca99094709428a0872ef325b620b744e08354581a363c051602a841b1879d8c100e351"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb6}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5b, 0xa8, @random="411e950601dc9cfc9bbdeb775ef8ed16b8972c76c0852c69ee866135cf8eb3bb224d1b8609edb180101a637b41b6548e56c5412edb299cc73f2bdfe7940ef846040233256b89d9688c002cf3cce498860d3a46ac8bb5da"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x41) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x82000000) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)) (async, rerun: 64) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x3, 0x20, 0xff, 0x5}, {0x81, 0x4, 0x2, 0x7}]}) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={0x0, 0x400, 0x9}) 21:50:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:32 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) (async, rerun: 32) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32) socket$caif_seqpacket(0x25, 0x5, 0x4) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x62080) (rerun: 32) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x8, 0x6, 0x7, 0x6, 0x6, 0xc848}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000ffd000/0x2000)=nil}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 21:50:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x3, 0x20, 0xff, 0x5}, {0x81, 0x4, 0x2, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={0x0, 0x400, 0x9}) 21:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0xfa, 0x10001]) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x80140) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0xfa, 0x10001]) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x80140) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) 21:50:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:33 executing program 3: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/194) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10c01, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x62080) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x8, 0x6, 0x7, 0x6, 0x6, 0xc848}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000ffd000/0x2000)=nil}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 21:50:33 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/151) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/146) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000100)=""/8) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:33 executing program 3: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/194) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10c01, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/194) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10c01, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001) (async) 21:50:33 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/164) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async, rerun: 32) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/151) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/146) (async) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000100)=""/8) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1, 0x1, 0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0)=[r1, r4, r5, r1, r1, r1, 0x0], &(0x7f0000000200)=[0x9, 0x7, 0x107ee1fe, 0xdf3, 0x4], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:33 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}]}) 21:50:33 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/164) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:50:33 executing program 3: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/194) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10c01, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/151) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/146) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000100)=""/8) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/151) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/146) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000100)=""/8) (async) 21:50:33 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/164) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1, 0x1, 0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0)=[r1, r4, r5, r1, r1, r1, 0x0], &(0x7f0000000200)=[0x9, 0x7, 0x107ee1fe, 0xdf3, 0x4], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0)=[r1, r4, r5, r1, r1, r1, 0x0], &(0x7f0000000200)=[0x9, 0x7, 0x107ee1fe, 0xdf3, 0x4], 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:33 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:33 executing program 3: setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1, 0x51, 0x8, 0x3f, 0x7, 0x1, 0x3f, 0xd, 0xac, 0x4, 0x5, 0x9, 0x2}, 0xe) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x183001) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7d) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fff) 21:50:33 executing program 3: setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1, 0x51, 0x8, 0x3f, 0x7, 0x1, 0x3f, 0xd, 0xac, 0x4, 0x5, 0x9, 0x2}, 0xe) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r1}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r1, 0x1, 0xffffffffffffffff}) (rerun: 32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0)=[r1, r4, r5, r1, r1, r1, 0x0], &(0x7f0000000200)=[0x9, 0x7, 0x107ee1fe, 0xdf3, 0x4], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}]}) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:33 executing program 3: setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1, 0x51, 0x8, 0x3f, 0x7, 0x1, 0x3f, 0xd, 0xac, 0x4, 0x5, 0x9, 0x2}, 0xe) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (rerun: 64) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7d) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fff) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x0, 0x9, 0x8}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x183001) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x0, 0x0, 0x8}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x183001) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1000004, 0x103c1) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7d) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fff) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {}]}) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1000004, 0x103c1) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffb000/0x4000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x4800) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1000004, 0x103c1) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x4800) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x4800) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) (async) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x190, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x190}, 0x1, 0x0, 0x0, 0x24000090}, 0x24000045) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{}]}) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffb000/0x4000)=nil}) (async, rerun: 32) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x3000009, 0x80010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{}]}) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x3000009, 0x80010, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffb000/0x4000)=nil}) (async, rerun: 32) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async, rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x190, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x190}, 0x1, 0x0, 0x0, 0x24000090}, 0x24000045) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x0, 0x7f, 0xff}, {}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x4800) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x190, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x190}, 0x1, 0x0, 0x0, 0x24000090}, 0x24000045) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x3000009, 0x80010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x3000009, 0x80010, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x0, 0x7f, 0xff}, {}]}) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xff, 0x9dd4, 0x3, 0x4e, 0x5, 0x4}) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x202100) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x0, 0x7f, 0xff}, {}]}) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}]}) 21:50:33 executing program 3: mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async, rerun: 32) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) (rerun: 32) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xff, 0x9dd4, 0x3, 0x4e, 0x5, 0x4}) 21:50:33 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (rerun: 64) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0xff}, {}]}) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x202100) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xff, 0x9dd4, 0x3, 0x4e, 0x5, 0x4}) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) (async) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xff, 0x9dd4, 0x3, 0x4e, 0x5, 0x4}) (async) 21:50:33 executing program 3: mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}]}) 21:50:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x10001, 0x1, 0x20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xc}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0x6, 0x10, r0, 0x8, '\x00', 0x0, r1, 0x1, 0x5, 0x3}, 0x48) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) 21:50:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x202100) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x202100) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}]}) 21:50:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x10001, 0x1, 0x20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xc}, 0x48) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0x6, 0x10, r0, 0x8, '\x00', 0x0, r1, 0x1, 0x5, 0x3}, 0x48) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) 21:50:33 executing program 3: mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x9) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000080), 0xffffffffffffffff, 0x424000) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0x5, 0x3]) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 21:50:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xff, 0x9dd4, 0x3, 0x4e, 0x5, 0x4}) 21:50:33 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x100) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[r1, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x1], 0x2, 0x1}) 21:50:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x10001, 0x1, 0x20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xc}, 0x48) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0x6, 0x10, r0, 0x8, '\x00', 0x0, r1, 0x1, 0x5, 0x3}, 0x48) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (rerun: 32) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x0, 0x9, 0x8}]}) 21:50:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xff, 0x9dd4, 0x3, 0x4e, 0x5, 0x4}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x9) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f0000000080), 0xffffffffffffffff, 0x424000) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0x5, 0x3]) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 21:50:33 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x100) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[r1, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x1], 0x2, 0x1}) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xff, 0x9dd4, 0x3, 0x4e, 0x5, 0x4}) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x0, 0x0, 0x8}]}) 21:50:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x9) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f0000000080), 0xffffffffffffffff, 0x424000) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0x5, 0x3]) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) (async, rerun: 64) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 21:50:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {}]}) 21:50:33 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x100) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[r1, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x1], 0x2, 0x1}) 21:50:33 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d29000/0x4000)=nil, &(0x7f0000c84000/0x4000)=nil, &(0x7f0000000340)="76cdb6ec4c98ebd05c316e79a8c7afee963cfd906f83d744fa742c4ab1f48a514e5c608c4bf4a24e6d4068b2ab07cf3c833f3ea93772cd6f75b7556b2e175f004c78f3e07c19089cc4a4c8d37a1fef4557eb0a61e18c978a4d46a72d3c264d68b38ed1bf6f770ed4e81a24c61160572b7665cd670017279da2a9afc8578c699d13bc9d3d70056bf8840d094385c632ffeed6c8aa368deeee5a9088532f936e8a7471bb7755887853ae5c986e8b", 0xad, r4}, 0x68) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000180), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x800, 0x4, {r2, r3/1000+10000}, {r5, r6/1000+60000}, {0x2}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "7125b6b06ff8f5dc"}}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x20000090) connect$can_bcm(r1, &(0x7f0000000040), 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480)=0x5, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x140f, 0x8, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x1405, 0x20, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffb000/0x1000)=nil) 21:50:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{}]}) 21:50:33 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) userfaultfd(0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) 21:50:33 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d29000/0x4000)=nil, &(0x7f0000c84000/0x4000)=nil, &(0x7f0000000340)="76cdb6ec4c98ebd05c316e79a8c7afee963cfd906f83d744fa742c4ab1f48a514e5c608c4bf4a24e6d4068b2ab07cf3c833f3ea93772cd6f75b7556b2e175f004c78f3e07c19089cc4a4c8d37a1fef4557eb0a61e18c978a4d46a72d3c264d68b38ed1bf6f770ed4e81a24c61160572b7665cd670017279da2a9afc8578c699d13bc9d3d70056bf8840d094385c632ffeed6c8aa368deeee5a9088532f936e8a7471bb7755887853ae5c986e8b", 0xad, r4}, 0x68) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000180), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x800, 0x4, {r2, r3/1000+10000}, {r5, r6/1000+60000}, {0x2}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "7125b6b06ff8f5dc"}}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x20000090) (async) connect$can_bcm(r1, &(0x7f0000000040), 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480)=0x5, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x140f, 0x8, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x1405, 0x20, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffb000/0x1000)=nil) 21:50:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{}]}) 21:50:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0x3ff]) syz_open_dev$evdev(&(0x7f00000000c0), 0xb9b5, 0x80000) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000000)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2], 0x8}) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000000)="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", 0xfa}, 0x68) 21:50:34 executing program 1: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000000)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2], 0x8}) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000000)="b431a1123c5d60ad2f262833475dcae06dec14e71bc95d6f6aab50a7b8db89fcf0ad9b7a6799d16f2e3ca23b17c4dadcdda1b00458231b56a27ad6a59ae94b3bd4bf10159e985b41e3b62efdd4f71d132ebaf3b5647aa59b0dcdb6d88e409fd2a3c0bd093b50fac4345a0333c8d04b2abff700442bdf48a1e425c0a293551de41ccf022a1bfac1846d9a9f9e4cf6259385b8603cf02e0f716b764ddd2831976fab1c575451e56dcc198d64a2b136f3c2caa39dbdc00ef3cd441f5588432c2ed5fb9d83caf5be47eed87d073155b3cb046b51ef1012d357856371960aac44703bc6a4bf912cf6158ec5af4517e08fd94fa5ec46f0494860f5e469", 0xfa}, 0x68) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000000)="b431a1123c5d60ad2f262833475dcae06dec14e71bc95d6f6aab50a7b8db89fcf0ad9b7a6799d16f2e3ca23b17c4dadcdda1b00458231b56a27ad6a59ae94b3bd4bf10159e985b41e3b62efdd4f71d132ebaf3b5647aa59b0dcdb6d88e409fd2a3c0bd093b50fac4345a0333c8d04b2abff700442bdf48a1e425c0a293551de41ccf022a1bfac1846d9a9f9e4cf6259385b8603cf02e0f716b764ddd2831976fab1c575451e56dcc198d64a2b136f3c2caa39dbdc00ef3cd441f5588432c2ed5fb9d83caf5be47eed87d073155b3cb046b51ef1012d357856371960aac44703bc6a4bf912cf6158ec5af4517e08fd94fa5ec46f0494860f5e469", 0xfa}, 0x68) (async) 21:50:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{}]}) 21:50:34 executing program 1: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 21:50:34 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d29000/0x4000)=nil, &(0x7f0000c84000/0x4000)=nil, &(0x7f0000000340)="76cdb6ec4c98ebd05c316e79a8c7afee963cfd906f83d744fa742c4ab1f48a514e5c608c4bf4a24e6d4068b2ab07cf3c833f3ea93772cd6f75b7556b2e175f004c78f3e07c19089cc4a4c8d37a1fef4557eb0a61e18c978a4d46a72d3c264d68b38ed1bf6f770ed4e81a24c61160572b7665cd670017279da2a9afc8578c699d13bc9d3d70056bf8840d094385c632ffeed6c8aa368deeee5a9088532f936e8a7471bb7755887853ae5c986e8b", 0xad, r4}, 0x68) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000180), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x800, 0x4, {r2, r3/1000+10000}, {r5, r6/1000+60000}, {0x2}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "7125b6b06ff8f5dc"}}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x20000090) connect$can_bcm(r1, &(0x7f0000000040), 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480)=0x5, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x140f, 0x8, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x1405, 0x20, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffb000/0x1000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x7) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) clock_gettime(0x0, &(0x7f00000004c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d29000/0x4000)=nil, &(0x7f0000c84000/0x4000)=nil, &(0x7f0000000340)="76cdb6ec4c98ebd05c316e79a8c7afee963cfd906f83d744fa742c4ab1f48a514e5c608c4bf4a24e6d4068b2ab07cf3c833f3ea93772cd6f75b7556b2e175f004c78f3e07c19089cc4a4c8d37a1fef4557eb0a61e18c978a4d46a72d3c264d68b38ed1bf6f770ed4e81a24c61160572b7665cd670017279da2a9afc8578c699d13bc9d3d70056bf8840d094385c632ffeed6c8aa368deeee5a9088532f936e8a7471bb7755887853ae5c986e8b", 0xad, r4}, 0x68) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000180), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x800, 0x4, {r2, r3/1000+10000}, {r5, r6/1000+60000}, {0x2}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "7125b6b06ff8f5dc"}}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x20000090) (async) connect$can_bcm(r1, &(0x7f0000000040), 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480)=0x5, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x140f, 0x8, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x1405, 0x20, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffb000/0x1000)=nil) (async) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000000)="b431a1123c5d60ad2f262833475dcae06dec14e71bc95d6f6aab50a7b8db89fcf0ad9b7a6799d16f2e3ca23b17c4dadcdda1b00458231b56a27ad6a59ae94b3bd4bf10159e985b41e3b62efdd4f71d132ebaf3b5647aa59b0dcdb6d88e409fd2a3c0bd093b50fac4345a0333c8d04b2abff700442bdf48a1e425c0a293551de41ccf022a1bfac1846d9a9f9e4cf6259385b8603cf02e0f716b764ddd2831976fab1c575451e56dcc198d64a2b136f3c2caa39dbdc00ef3cd441f5588432c2ed5fb9d83caf5be47eed87d073155b3cb046b51ef1012d357856371960aac44703bc6a4bf912cf6158ec5af4517e08fd94fa5ec46f0494860f5e469", 0xfa}, 0x68) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000000)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2], 0x8}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000000)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2], 0x8}) (async) 21:50:34 executing program 1: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 21:50:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x0, 0x7f, 0xff}, {}]}) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x2000001, 0x1010, r0, 0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000008}) 21:50:34 executing program 4: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x0, 0x7f, 0xff}, {}]}) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x2000001, 0x1010, r0, 0x0) (async) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000008}) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff7000/0x8000)=nil) 21:50:34 executing program 4: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x0, 0x7f, 0xff}, {}]}) 21:50:34 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:34 executing program 1: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x2000001, 0x1010, r0, 0x0) (async) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000008}) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff7000/0x8000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff7000/0x8000)=nil) (async) 21:50:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0xff}, {}]}) 21:50:34 executing program 4: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x10004, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0xffff}}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 21:50:34 executing program 1: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff7000/0x8000)=nil) 21:50:34 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x10004, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0xffff}}, 0x10) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 21:50:34 executing program 1: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = gettid() r1 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) 21:50:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:34 executing program 1: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181940, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6a7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3e000000}, {0x6, 0x11, 0x3ff}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044080}, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5, 0x7f, 0xff}, {0x0, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x1f, 0x1}]}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x115640, 0x0) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = gettid() r1 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x10004, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0xffff}}, 0x10) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 21:50:34 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) 21:50:34 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 21:50:34 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) r0 = gettid() r1 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 21:50:34 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 21:50:34 executing program 3: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x2, 0xffffffff]) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x11, 0x7b}, {{0x0, 0x2710}, 0x15, 0xbd7, 0x3}, {{0x0, 0xea60}, 0x17, 0x5, 0x3}, {{0x77359400}, 0x4, 0x3, 0x6}, {{}, 0x11, 0x4, 0x8}, {{r1, r2/1000+60000}, 0x16, 0xf06, 0x9}, {{0x77359400}, 0x17, 0x101, 0x31}], 0xa8) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x1ff, 0x2, 0x880f, 0x400, 0x6, 0x401, 0x40}, &(0x7f0000000200)={0x8000000000000001, 0x5, 0x2192, 0x10000, 0x6, 0x8f, 0x9, 0x7fffffffffffffff}, &(0x7f0000000240)={0x8000000000000001, 0x1, 0xae, 0x4, 0x8, 0x3, 0x1ff, 0x800}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xffffffff7fffffff]}, 0x8}) 21:50:34 executing program 3: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:34 executing program 1: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/194) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 21:50:34 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:34 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x2, 0xffffffff]) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x11, 0x7b}, {{0x0, 0x2710}, 0x15, 0xbd7, 0x3}, {{0x0, 0xea60}, 0x17, 0x5, 0x3}, {{0x77359400}, 0x4, 0x3, 0x6}, {{}, 0x11, 0x4, 0x8}, {{r1, r2/1000+60000}, 0x16, 0xf06, 0x9}, {{0x77359400}, 0x17, 0x101, 0x31}], 0xa8) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x1ff, 0x2, 0x880f, 0x400, 0x6, 0x401, 0x40}, &(0x7f0000000200)={0x8000000000000001, 0x5, 0x2192, 0x10000, 0x6, 0x8f, 0x9, 0x7fffffffffffffff}, &(0x7f0000000240)={0x8000000000000001, 0x1, 0xae, 0x4, 0x8, 0x3, 0x1ff, 0x800}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xffffffff7fffffff]}, 0x8}) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x3, 0x3fd]) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r1], 0x2}) 21:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x2, 0xffffffff]) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x11, 0x7b}, {{0x0, 0x2710}, 0x15, 0xbd7, 0x3}, {{0x0, 0xea60}, 0x17, 0x5, 0x3}, {{0x77359400}, 0x4, 0x3, 0x6}, {{}, 0x11, 0x4, 0x8}, {{r1, r2/1000+60000}, 0x16, 0xf06, 0x9}, {{0x77359400}, 0x17, 0x101, 0x31}], 0xa8) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x1ff, 0x2, 0x880f, 0x400, 0x6, 0x401, 0x40}, &(0x7f0000000200)={0x8000000000000001, 0x5, 0x2192, 0x10000, 0x6, 0x8f, 0x9, 0x7fffffffffffffff}, &(0x7f0000000240)={0x8000000000000001, 0x1, 0xae, 0x4, 0x8, 0x3, 0x1ff, 0x800}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xffffffff7fffffff]}, 0x8}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x2, 0xffffffff]) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x11, 0x7b}, {{0x0, 0x2710}, 0x15, 0xbd7, 0x3}, {{0x0, 0xea60}, 0x17, 0x5, 0x3}, {{0x77359400}, 0x4, 0x3, 0x6}, {{}, 0x11, 0x4, 0x8}, {{r1, r2/1000+60000}, 0x16, 0xf06, 0x9}, {{0x77359400}, 0x17, 0x101, 0x31}], 0xa8) (async) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x1ff, 0x2, 0x880f, 0x400, 0x6, 0x401, 0x40}, &(0x7f0000000200)={0x8000000000000001, 0x5, 0x2192, 0x10000, 0x6, 0x8f, 0x9, 0x7fffffffffffffff}, &(0x7f0000000240)={0x8000000000000001, 0x1, 0xae, 0x4, 0x8, 0x3, 0x1ff, 0x800}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xffffffff7fffffff]}, 0x8}) (async) 21:50:34 executing program 3: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x3, 0x3fd]) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r1], 0x2}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x3, 0x3fd]) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r1], 0x2}) (async) 21:50:34 executing program 1: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r1 = getpgid(0x0) syz_open_dev$dri(&(0x7f0000000140), 0x707, 0x481000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x90000000000, 0x8100) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil}) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r3, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x7}) 21:50:34 executing program 4: syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:34 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x800) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0xd, 0x8, 0x3, 0xfffffffffffffff4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x9d5b}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6ec6}, @map_idx={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe6c, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000180)='syzkaller\x00', 0x10001, 0xd5, &(0x7f00000001c0)=""/213, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x7fff, 0x3}, 0x10}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000003c0)={0x0, 0x3, r2, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x80, r0, 0x0, 0x0, 0x1}}, 0x20) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:34 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x3, 0x3fd]) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r1], 0x2}) 21:50:34 executing program 1: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r1 = getpgid(0x0) syz_open_dev$dri(&(0x7f0000000140), 0x707, 0x481000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x90000000000, 0x8100) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil}) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r3, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x7}) 21:50:34 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:34 executing program 4: syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x80, r0, 0x0, 0x0, 0x1}}, 0x20) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x80, r0, 0x0, 0x0, 0x1}}, 0x20) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:34 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:34 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x800) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0xd, 0x8, 0x3, 0xfffffffffffffff4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x9d5b}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6ec6}, @map_idx={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe6c, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000180)='syzkaller\x00', 0x10001, 0xd5, &(0x7f00000001c0)=""/213, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x7fff, 0x3}, 0x10}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000003c0)={0x0, 0x3, r2, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400000) (async) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0xd, 0x8, 0x3, 0xfffffffffffffff4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x9d5b}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6ec6}, @map_idx={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe6c, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000180)='syzkaller\x00', 0x10001, 0xd5, &(0x7f00000001c0)=""/213, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x7fff, 0x3}, 0x10}, 0x80) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000003c0)={0x0, 0x3, r2, 0x9}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:34 executing program 0: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="f56b511dc01ad0", 0x7}, 0x68) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 21:50:34 executing program 4: syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x101, 0x9]) 21:50:34 executing program 1: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1ff, 0x0, &(0x7f0000ffc000/0x2000)=nil}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3], &(0x7f0000000140)=[0x10001, 0x4], 0x9, 0x1}) 21:50:34 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:34 executing program 1: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1ff, 0x0, &(0x7f0000ffc000/0x2000)=nil}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3], &(0x7f0000000140)=[0x10001, 0x4], 0x9, 0x1}) 21:50:34 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 1) 21:50:34 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0xfffffffffffffffd, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:34 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x80, r0, 0x0, 0x0, 0x1}}, 0x20) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x80, r0, 0x0, 0x0, 0x1}}, 0x20) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (fail_nth: 1) 21:50:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) [ 1739.315651] FAULT_INJECTION: forcing a failure. [ 1739.315651] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.322344] FAULT_INJECTION: forcing a failure. [ 1739.322344] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.343507] CPU: 0 PID: 29580 Comm: syz-executor.1 Not tainted 4.14.277-syzkaller #0 [ 1739.351400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.360750] Call Trace: [ 1739.363340] dump_stack+0x1b2/0x281 [ 1739.366976] should_fail.cold+0x10a/0x149 [ 1739.371128] should_failslab+0xd6/0x130 [ 1739.375109] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1739.379780] ? security_capable_noaudit+0x85/0xb0 [ 1739.384794] do_seccomp+0x2e9/0x19c0 [ 1739.388509] ? wait_for_completion_io+0x10/0x10 [ 1739.393176] ? vfs_write+0x319/0x4d0 [ 1739.396881] ? __seccomp_filter+0xdd0/0xdd0 [ 1739.401183] ? SyS_write+0x14d/0x210 [ 1739.405068] ? SyS_read+0x210/0x210 [ 1739.408679] ? __do_page_fault+0x159/0xad0 [ 1739.412899] ? do_syscall_64+0x4c/0x640 [ 1739.416868] ? prctl_get_seccomp+0x50/0x50 [ 1739.421085] do_syscall_64+0x1d5/0x640 [ 1739.424965] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1739.430153] RIP: 0033:0x7f1c24f530e9 [ 1739.433849] RSP: 002b:00007f1c238c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1739.441548] RAX: ffffffffffffffda RBX: 00007f1c25065f60 RCX: 00007f1c24f530e9 [ 1739.448803] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1739.456057] RBP: 00007f1c238c81d0 R08: 0000000000000000 R09: 0000000000000000 21:50:35 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:35 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x800) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0xd, 0x8, 0x3, 0xfffffffffffffff4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x9d5b}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6ec6}, @map_idx={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe6c, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000180)='syzkaller\x00', 0x10001, 0xd5, &(0x7f00000001c0)=""/213, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x7fff, 0x3}, 0x10}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000003c0)={0x0, 0x3, r2, 0x9}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)) 21:50:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (fail_nth: 2) [ 1739.463317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.470579] R13: 00007ffda61a880f R14: 00007f1c238c8300 R15: 0000000000022000 [ 1739.477879] CPU: 1 PID: 29569 Comm: syz-executor.0 Not tainted 4.14.277-syzkaller #0 [ 1739.485936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.495293] Call Trace: [ 1739.497928] dump_stack+0x1b2/0x281 [ 1739.501561] should_fail.cold+0x10a/0x149 [ 1739.505708] should_failslab+0xd6/0x130 [ 1739.509681] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1739.514793] __kmalloc_node+0x38/0x70 [ 1739.517339] FAULT_INJECTION: forcing a failure. [ 1739.517339] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.518589] kvmalloc_node+0x46/0xd0 [ 1739.518604] newseg+0x1d0/0xbb0 [ 1739.518621] ? shmctl_down+0x250/0x250 [ 1739.540604] ipcget+0xc6/0xb40 [ 1739.543784] ? __mutex_unlock_slowpath+0x75/0x770 [ 1739.548610] ? ipc_obtain_object_check+0xe0/0xe0 [ 1739.553362] ? vfs_write+0x319/0x4d0 [ 1739.557064] SyS_shmget+0xc3/0x100 [ 1739.560593] ? is_file_shm_hugepages+0x40/0x40 [ 1739.565164] ? __do_page_fault+0x159/0xad0 [ 1739.569381] ? do_syscall_64+0x4c/0x640 [ 1739.573350] ? is_file_shm_hugepages+0x40/0x40 [ 1739.577930] do_syscall_64+0x1d5/0x640 [ 1739.581808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1739.586983] RIP: 0033:0x7f15c5ac40e9 [ 1739.590674] RSP: 002b:00007f15c4439168 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1739.598364] RAX: ffffffffffffffda RBX: 00007f15c5bd6f60 RCX: 00007f15c5ac40e9 [ 1739.605618] RDX: 0000000000001808 RSI: 0000000000003000 RDI: 0000000000000000 [ 1739.612873] RBP: 00007f15c44391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.620124] R10: 0000000020ffd000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.627379] R13: 00007ffeec1bab6f R14: 00007f15c4439300 R15: 0000000000022000 [ 1739.634671] CPU: 0 PID: 29592 Comm: syz-executor.1 Not tainted 4.14.277-syzkaller #0 [ 1739.642552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.651899] Call Trace: [ 1739.654491] dump_stack+0x1b2/0x281 [ 1739.658120] should_fail.cold+0x10a/0x149 [ 1739.662272] should_failslab+0xd6/0x130 [ 1739.666246] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1739.671351] __get_vm_area_node+0xed/0x340 [ 1739.675592] ? bpf_prog_alloc+0x3a/0x1e0 [ 1739.679643] __vmalloc+0xfe/0x1d0 [ 1739.683093] ? bpf_prog_alloc+0x3a/0x1e0 [ 1739.687150] ? vzalloc+0x150/0x150 [ 1739.690694] bpf_prog_alloc+0x3a/0x1e0 [ 1739.694847] bpf_prog_create_from_user+0x99/0x290 [ 1739.699687] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1739.705397] do_seccomp+0x31b/0x19c0 [ 1739.709113] ? wait_for_completion_io+0x10/0x10 [ 1739.713781] ? vfs_write+0x319/0x4d0 21:50:35 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x3}) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000001, 0x40010, r0, 0x82000000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:35 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x3}) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000001, 0x40010, r0, 0x82000000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) 21:50:35 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x3}) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000001, 0x40010, r0, 0x82000000) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (rerun: 32) 21:50:35 executing program 3: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="ee80189871958d7e89ff5b1930fa5038d285cbf13390e83740f3feca47cc90a446fa469b6716bc4d3ab196e282afe6ecc7bc1c21032071e4fd162bae740f6b0e89baa3b120316af1861e0e5de85ed749224a717d127ee22a817e711f483b2b01e9f6f134796abb2be08627019c1807b60f6fd6cfe3dd21e1b8abbc99ac37d5a4451885b63252d051d5c52e9dfc91caf9", 0x90, r0}, 0x68) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa0, 0x2, 0x6, 0x0, 0x0, 0x80000001, 0xa3360, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x7fffffffffffffff}, 0x5c400, 0x1f, 0x3, 0xa, 0xfff, 0x9, 0x817, 0x0, 0x7, 0x0, 0x800}, r1, 0x6, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, 0x20010, r2, 0x2) [ 1739.717499] ? __seccomp_filter+0xdd0/0xdd0 [ 1739.721818] ? SyS_write+0x14d/0x210 [ 1739.725532] ? SyS_read+0x210/0x210 [ 1739.729157] ? __do_page_fault+0x159/0xad0 [ 1739.733392] ? do_syscall_64+0x4c/0x640 [ 1739.737364] ? prctl_get_seccomp+0x50/0x50 [ 1739.741593] do_syscall_64+0x1d5/0x640 [ 1739.745483] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1739.750666] RIP: 0033:0x7f1c24f530e9 [ 1739.754367] RSP: 002b:00007f1c238c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1739.762081] RAX: ffffffffffffffda RBX: 00007f1c25065f60 RCX: 00007f1c24f530e9 [ 1739.769343] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1739.776606] RBP: 00007f1c238c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.783868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.791123] R13: 00007ffda61a880f R14: 00007f1c238c8300 R15: 0000000000022000 21:50:35 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 2) 21:50:35 executing program 3: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x2000)=nil) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (rerun: 64) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="ee80189871958d7e89ff5b1930fa5038d285cbf13390e83740f3feca47cc90a446fa469b6716bc4d3ab196e282afe6ecc7bc1c21032071e4fd162bae740f6b0e89baa3b120316af1861e0e5de85ed749224a717d127ee22a817e711f483b2b01e9f6f134796abb2be08627019c1807b60f6fd6cfe3dd21e1b8abbc99ac37d5a4451885b63252d051d5c52e9dfc91caf9", 0x90, r0}, 0x68) (async) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa0, 0x2, 0x6, 0x0, 0x0, 0x80000001, 0xa3360, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x7fffffffffffffff}, 0x5c400, 0x1f, 0x3, 0xa, 0xfff, 0x9, 0x817, 0x0, 0x7, 0x0, 0x800}, r1, 0x6, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, 0x20010, r2, 0x2) 21:50:35 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 1) 21:50:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) 21:50:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) [ 1739.816983] syz-executor.1: vmalloc: allocation failure: 4096 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1739.828485] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1739.837373] CPU: 0 PID: 29592 Comm: syz-executor.1 Not tainted 4.14.277-syzkaller #0 [ 1739.845257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.854603] Call Trace: [ 1739.856015] FAULT_INJECTION: forcing a failure. [ 1739.856015] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.857187] dump_stack+0x1b2/0x281 [ 1739.857203] warn_alloc.cold+0x96/0x1cc [ 1739.857216] ? zone_watermark_ok_safe+0x220/0x220 [ 1739.857229] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1739.857238] ? __get_vm_area_node+0xed/0x340 [ 1739.857251] ? __get_vm_area_node+0x27d/0x340 [ 1739.895115] ? bpf_prog_alloc+0x3a/0x1e0 [ 1739.899166] __vmalloc+0x170/0x1d0 [ 1739.902694] ? vzalloc+0x150/0x150 [ 1739.906316] bpf_prog_alloc+0x3a/0x1e0 [ 1739.910190] bpf_prog_create_from_user+0x99/0x290 [ 1739.915018] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1739.920728] do_seccomp+0x31b/0x19c0 [ 1739.924434] ? wait_for_completion_io+0x10/0x10 [ 1739.929091] ? vfs_write+0x319/0x4d0 [ 1739.932792] ? __seccomp_filter+0xdd0/0xdd0 [ 1739.937135] ? SyS_write+0x14d/0x210 [ 1739.940829] ? SyS_read+0x210/0x210 [ 1739.944442] ? __do_page_fault+0x159/0xad0 [ 1739.948666] ? do_syscall_64+0x4c/0x640 [ 1739.952627] ? prctl_get_seccomp+0x50/0x50 [ 1739.956852] do_syscall_64+0x1d5/0x640 [ 1739.960730] entry_SYSCALL_64_after_hwframe+0x46/0xbb 21:50:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) (async) [ 1739.965913] RIP: 0033:0x7f1c24f530e9 [ 1739.969606] RSP: 002b:00007f1c238c8168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1739.977298] RAX: ffffffffffffffda RBX: 00007f1c25065f60 RCX: 00007f1c24f530e9 [ 1739.984560] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1739.991817] RBP: 00007f1c238c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.999072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.006326] R13: 00007ffda61a880f R14: 00007f1c238c8300 R15: 0000000000022000 [ 1740.025353] CPU: 1 PID: 29613 Comm: syz-executor.0 Not tainted 4.14.277-syzkaller #0 [ 1740.029316] Mem-Info: [ 1740.033241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.033245] Call Trace: [ 1740.033260] dump_stack+0x1b2/0x281 [ 1740.033274] should_fail.cold+0x10a/0x149 [ 1740.033288] should_failslab+0xd6/0x130 [ 1740.033298] kmem_cache_alloc+0x28e/0x3c0 [ 1740.033310] __d_alloc+0x2a/0xa20 [ 1740.033325] hugetlb_file_setup+0x1b3/0x760 [ 1740.033336] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1740.035802] active_anon:17621 inactive_anon:6744 isolated_anon:0 [ 1740.035802] active_file:5787 inactive_file:10892 isolated_file:0 [ 1740.035802] unevictable:0 dirty:103 writeback:0 unstable:0 [ 1740.035802] slab_reclaimable:26341 slab_unreclaimable:121259 [ 1740.035802] mapped:30541 shmem:7082 pagetables:610 bounce:0 [ 1740.035802] free:1477404 free_pcp:305 free_cma:0 [ 1740.045066] ? hugetlbfs_fill_super+0x950/0x950 [ 1740.045084] newseg+0x3d4/0xbb0 [ 1740.045095] ? shmctl_down+0x250/0x250 [ 1740.045109] ipcget+0xc6/0xb40 21:50:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) [ 1740.045122] ? __mutex_unlock_slowpath+0x75/0x770 [ 1740.045133] ? ipc_obtain_object_check+0xe0/0xe0 [ 1740.047765] Node 0 active_anon:70484kB inactive_anon:26976kB active_file:23020kB inactive_file:43568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122164kB dirty:408kB writeback:0kB shmem:28328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1740.051300] ? vfs_write+0x319/0x4d0 [ 1740.051313] SyS_shmget+0xc3/0x100 [ 1740.051322] ? is_file_shm_hugepages+0x40/0x40 [ 1740.051331] ? __do_page_fault+0x159/0xad0 [ 1740.051341] ? do_syscall_64+0x4c/0x640 [ 1740.055555] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1740.059421] ? is_file_shm_hugepages+0x40/0x40 [ 1740.059432] do_syscall_64+0x1d5/0x640 [ 1740.059448] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1740.059456] RIP: 0033:0x7f15c5ac40e9 [ 1740.063651] Node 0 [ 1740.067008] RSP: 002b:00007f15c4439168 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1740.067019] RAX: ffffffffffffffda RBX: 00007f15c5bd6f60 RCX: 00007f15c5ac40e9 [ 1740.067025] RDX: 0000000000001808 RSI: 0000000000003000 RDI: 0000000000000000 [ 1740.067031] RBP: 00007f15c44391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.067036] R10: 0000000020ffd000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.067041] R13: 00007ffeec1bab6f R14: 00007f15c4439300 R15: 0000000000022000 [ 1740.275085] DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.304150] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1740.309186] Node 0 DMA32 free:1857224kB min:36196kB low:45244kB high:54292kB active_anon:66008kB inactive_anon:26976kB active_file:23020kB inactive_file:43588kB unevictable:0kB writepending:448kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7232kB pagetables:2196kB bounce:0kB free_pcp:1360kB local_pcp:628kB free_cma:0kB [ 1740.340846] lowmem_reserve[]: 0 0 0 0 0 [ 1740.345135] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.370713] lowmem_reserve[]: 0 0 0 0 0 [ 1740.374758] Node 1 Normal free:4040316kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.402617] lowmem_reserve[]: 0 0 0 0 0 [ 1740.406609] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1740.420514] Node 0 DMA32: 2240*4kB (UME) 499*8kB (UME) 55*16kB (UME) 93*32kB (UME) 253*64kB (UME) 42*128kB (UM) 10*256kB (UME) 1*512kB (U) 1*1024kB (U) 3*2048kB (UE) 442*4096kB (UM) = 1859048kB [ 1740.438213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1740.449173] Node 1 Normal: 73*4kB (UME) 415*8kB (UE) 282*16kB (UM) 82*32kB (UME) 26*64kB (UM) 12*128kB (UM) 16*256kB (UME) 2*512kB (U) 3*1024kB (UME) 4*2048kB (UM) 979*4096kB (M) = 4040316kB [ 1740.466635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.475710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.484593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.493474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.502036] 23766 total pagecache pages [ 1740.506060] 0 pages in swap cache [ 1740.509498] Swap cache stats: add 0, delete 0, find 0/0 [ 1740.514885] Free swap = 0kB [ 1740.517890] Total swap = 0kB [ 1740.520883] 2097051 pages RAM 21:50:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0xff}, {}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x82002) 21:50:36 executing program 3: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="ee80189871958d7e89ff5b1930fa5038d285cbf13390e83740f3feca47cc90a446fa469b6716bc4d3ab196e282afe6ecc7bc1c21032071e4fd162bae740f6b0e89baa3b120316af1861e0e5de85ed749224a717d127ee22a817e711f483b2b01e9f6f134796abb2be08627019c1807b60f6fd6cfe3dd21e1b8abbc99ac37d5a4451885b63252d051d5c52e9dfc91caf9", 0x90, r0}, 0x68) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa0, 0x2, 0x6, 0x0, 0x0, 0x80000001, 0xa3360, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x7fffffffffffffff}, 0x5c400, 0x1f, 0x3, 0xa, 0xfff, 0x9, 0x817, 0x0, 0x7, 0x0, 0x800}, r1, 0x6, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, 0x20010, r2, 0x2) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x2000)=nil) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="ee80189871958d7e89ff5b1930fa5038d285cbf13390e83740f3feca47cc90a446fa469b6716bc4d3ab196e282afe6ecc7bc1c21032071e4fd162bae740f6b0e89baa3b120316af1861e0e5de85ed749224a717d127ee22a817e711f483b2b01e9f6f134796abb2be08627019c1807b60f6fd6cfe3dd21e1b8abbc99ac37d5a4451885b63252d051d5c52e9dfc91caf9", 0x90, r0}, 0x68) (async) gettid() (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa0, 0x2, 0x6, 0x0, 0x0, 0x80000001, 0xa3360, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x7fffffffffffffff}, 0x5c400, 0x1f, 0x3, 0xa, 0xfff, 0x9, 0x817, 0x0, 0x7, 0x0, 0x800}, r1, 0x6, 0xffffffffffffffff, 0x8) (async) mmap$perf(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, 0x20010, r2, 0x2) (async) 21:50:36 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 3) 21:50:36 executing program 5: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) 21:50:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 21:50:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x101]) [ 1740.524022] 0 pages HighMem/MovableOnly [ 1740.527978] 363897 pages reserved [ 1740.531406] 0 pages cma reserved 21:50:36 executing program 5: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) (async) 21:50:36 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0xb}}, 0x20) 21:50:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0xff}, {}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x82002) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0xff}, {}]}) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x82002) (async) [ 1740.600753] FAULT_INJECTION: forcing a failure. [ 1740.600753] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.622460] CPU: 0 PID: 29648 Comm: syz-executor.0 Not tainted 4.14.277-syzkaller #0 [ 1740.630361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.639708] Call Trace: [ 1740.642295] dump_stack+0x1b2/0x281 [ 1740.645926] should_fail.cold+0x10a/0x149 21:50:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) 21:50:36 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0xb}}, 0x20) [ 1740.650077] should_failslab+0xd6/0x130 [ 1740.654055] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1740.658729] ? __lockdep_init_map+0x100/0x560 [ 1740.663221] resv_map_alloc+0x41/0x330 [ 1740.667110] hugetlbfs_get_inode+0x22c/0x420 [ 1740.671517] hugetlb_file_setup+0x218/0x760 [ 1740.675837] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1740.681109] ? hugetlbfs_fill_super+0x950/0x950 [ 1740.685779] newseg+0x3d4/0xbb0 [ 1740.689190] ? shmctl_down+0x250/0x250 [ 1740.693076] ipcget+0xc6/0xb40 [ 1740.696272] ? __mutex_unlock_slowpath+0x75/0x770 21:50:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) [ 1740.701124] ? ipc_obtain_object_check+0xe0/0xe0 [ 1740.705876] ? vfs_write+0x319/0x4d0 [ 1740.709588] SyS_shmget+0xc3/0x100 [ 1740.713124] ? is_file_shm_hugepages+0x40/0x40 [ 1740.717707] ? __do_page_fault+0x159/0xad0 [ 1740.721938] ? do_syscall_64+0x4c/0x640 [ 1740.725910] ? is_file_shm_hugepages+0x40/0x40 [ 1740.730489] do_syscall_64+0x1d5/0x640 [ 1740.734376] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1740.739558] RIP: 0033:0x7f15c5ac40e9 [ 1740.743258] RSP: 002b:00007f15c4439168 EFLAGS: 00000246 ORIG_RAX: 000000000000001d 21:50:36 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 4) 21:50:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 21:50:36 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0xb}}, 0x20) 21:50:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0xff}, {}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x82002) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0xff}, {}]}) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x82002) (async) 21:50:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)) 21:50:36 executing program 5: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 1740.750961] RAX: ffffffffffffffda RBX: 00007f15c5bd6f60 RCX: 00007f15c5ac40e9 [ 1740.758226] RDX: 0000000000001808 RSI: 0000000000003000 RDI: 0000000000000000 [ 1740.765484] RBP: 00007f15c44391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.772745] R10: 0000000020ffd000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.780007] R13: 00007ffeec1bab6f R14: 00007f15c4439300 R15: 0000000000022000 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2800006) shmget(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 21:50:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 21:50:36 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x559100, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff8000/0x2000)=nil, 0x2000}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) [ 1740.852495] FAULT_INJECTION: forcing a failure. [ 1740.852495] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.870351] CPU: 0 PID: 29685 Comm: syz-executor.0 Not tainted 4.14.277-syzkaller #0 [ 1740.878336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.887697] Call Trace: [ 1740.890287] dump_stack+0x1b2/0x281 [ 1740.893920] should_fail.cold+0x10a/0x149 [ 1740.898088] should_failslab+0xd6/0x130 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2800006) (async) shmget(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2800006) shmget(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2800006) (async) shmget(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) (async) [ 1740.902155] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1740.906827] resv_map_alloc+0x79/0x330 [ 1740.910718] hugetlbfs_get_inode+0x22c/0x420 [ 1740.915128] hugetlb_file_setup+0x218/0x760 [ 1740.919446] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1740.924721] ? hugetlbfs_fill_super+0x950/0x950 [ 1740.929392] newseg+0x3d4/0xbb0 [ 1740.932684] ? shmctl_down+0x250/0x250 [ 1740.936573] ipcget+0xc6/0xb40 [ 1740.939766] ? __mutex_unlock_slowpath+0x75/0x770 [ 1740.944606] ? ipc_obtain_object_check+0xe0/0xe0 [ 1740.949357] ? vfs_write+0x319/0x4d0 21:50:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x106082, 0x0) clock_gettime(0x4, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x10, 0x3, {}, {r2, r3/1000+10000}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x4, 0x6, 0x0, 0x0, "22c9dda65444cafc"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) [ 1740.953065] SyS_shmget+0xc3/0x100 [ 1740.956599] ? is_file_shm_hugepages+0x40/0x40 [ 1740.961173] ? __do_page_fault+0x159/0xad0 [ 1740.965403] ? do_syscall_64+0x4c/0x640 [ 1740.969372] ? is_file_shm_hugepages+0x40/0x40 [ 1740.973950] do_syscall_64+0x1d5/0x640 [ 1740.977841] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1740.983023] RIP: 0033:0x7f15c5ac40e9 [ 1740.986723] RSP: 002b:00007f15c4439168 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1740.994425] RAX: ffffffffffffffda RBX: 00007f15c5bd6f60 RCX: 00007f15c5ac40e9 21:50:36 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 5) 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 21:50:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x106082, 0x0) (async) clock_gettime(0x4, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x10, 0x3, {}, {r2, r3/1000+10000}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x4, 0x6, 0x0, 0x0, "22c9dda65444cafc"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) 21:50:36 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x106082, 0x0) clock_gettime(0x4, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x10, 0x3, {}, {r2, r3/1000+10000}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x4, 0x6, 0x0, 0x0, "22c9dda65444cafc"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) 21:50:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 21:50:36 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x559100, 0x0) (rerun: 64) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff8000/0x2000)=nil, 0x2000}) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (rerun: 32) [ 1741.001686] RDX: 0000000000001808 RSI: 0000000000003000 RDI: 0000000000000000 [ 1741.008949] RBP: 00007f15c44391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.016213] R10: 0000000020ffd000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.023479] R13: 00007ffeec1bab6f R14: 00007f15c4439300 R15: 0000000000022000 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) (async) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 21:50:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) 21:50:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x106082, 0x0) clock_gettime(0x4, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x10, 0x3, {}, {r2, r3/1000+10000}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x4, 0x6, 0x0, 0x0, "22c9dda65444cafc"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1000) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) 21:50:36 executing program 3: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x559100, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff8000/0x2000)=nil, 0x2000}) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) [ 1741.098768] FAULT_INJECTION: forcing a failure. [ 1741.098768] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.126143] CPU: 0 PID: 29726 Comm: syz-executor.0 Not tainted 4.14.277-syzkaller #0 [ 1741.134040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.143392] Call Trace: 21:50:36 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) (async) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) [ 1741.145981] dump_stack+0x1b2/0x281 [ 1741.149610] should_fail.cold+0x10a/0x149 [ 1741.153757] should_failslab+0xd6/0x130 [ 1741.157735] kmem_cache_alloc+0x28e/0x3c0 [ 1741.161883] hugetlbfs_alloc_inode+0x75/0x1a0 [ 1741.166377] ? init_once+0x20/0x20 [ 1741.169914] alloc_inode+0x5d/0x170 [ 1741.173533] new_inode+0x1d/0xf0 [ 1741.176899] hugetlbfs_get_inode+0x241/0x420 [ 1741.181306] hugetlb_file_setup+0x218/0x760 [ 1741.185622] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1741.190893] ? hugetlbfs_fill_super+0x950/0x950 [ 1741.195561] newseg+0x3d4/0xbb0 [ 1741.198839] ? shmctl_down+0x250/0x250 [ 1741.202729] ipcget+0xc6/0xb40 [ 1741.205922] ? __mutex_unlock_slowpath+0x75/0x770 [ 1741.210764] ? ipc_obtain_object_check+0xe0/0xe0 [ 1741.215518] ? vfs_write+0x319/0x4d0 [ 1741.219228] SyS_shmget+0xc3/0x100 [ 1741.222770] ? is_file_shm_hugepages+0x40/0x40 [ 1741.227353] ? __do_page_fault+0x159/0xad0 [ 1741.231589] ? do_syscall_64+0x4c/0x640 [ 1741.235561] ? is_file_shm_hugepages+0x40/0x40 [ 1741.240141] do_syscall_64+0x1d5/0x640 [ 1741.244031] entry_SYSCALL_64_after_hwframe+0x46/0xbb 21:50:36 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 6) 21:50:36 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil}) 21:50:36 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x8}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) 21:50:36 executing program 3: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) 21:50:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x9cc00) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) [ 1741.249216] RIP: 0033:0x7f15c5ac40e9 [ 1741.252918] RSP: 002b:00007f15c4439168 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1741.260623] RAX: ffffffffffffffda RBX: 00007f15c5bd6f60 RCX: 00007f15c5ac40e9 [ 1741.267882] RDX: 0000000000001808 RSI: 0000000000003000 RDI: 0000000000000000 [ 1741.275131] RBP: 00007f15c44391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.282380] R10: 0000000020ffd000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.289627] R13: 00007ffeec1bab6f R14: 00007f15c4439300 R15: 0000000000022000 [ 1741.347167] FAULT_INJECTION: forcing a failure. [ 1741.347167] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.364838] CPU: 1 PID: 29760 Comm: syz-executor.0 Not tainted 4.14.277-syzkaller #0 [ 1741.372726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.382074] Call Trace: [ 1741.384658] dump_stack+0x1b2/0x281 [ 1741.388298] should_fail.cold+0x10a/0x149 [ 1741.392448] should_failslab+0xd6/0x130 [ 1741.396423] kmem_cache_alloc+0x28e/0x3c0 [ 1741.400574] get_empty_filp+0x86/0x3f0 [ 1741.404461] alloc_file+0x23/0x440 [ 1741.408000] hugetlb_file_setup+0x348/0x760 [ 1741.412325] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1741.417600] ? hugetlbfs_fill_super+0x950/0x950 [ 1741.422278] newseg+0x3d4/0xbb0 [ 1741.425556] ? shmctl_down+0x250/0x250 [ 1741.429443] ipcget+0xc6/0xb40 [ 1741.432636] ? __mutex_unlock_slowpath+0x75/0x770 [ 1741.437483] ? ipc_obtain_object_check+0xe0/0xe0 [ 1741.442232] ? vfs_write+0x319/0x4d0 21:50:36 executing program 3: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil}) 21:50:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x9cc00) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) 21:50:36 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:36 executing program 4: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:36 executing program 5: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil}) (async) [ 1741.445944] SyS_shmget+0xc3/0x100 [ 1741.449481] ? is_file_shm_hugepages+0x40/0x40 [ 1741.454058] ? __do_page_fault+0x159/0xad0 [ 1741.458287] ? do_syscall_64+0x4c/0x640 [ 1741.462253] ? is_file_shm_hugepages+0x40/0x40 [ 1741.466837] do_syscall_64+0x1d5/0x640 [ 1741.470726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1741.475906] RIP: 0033:0x7f15c5ac40e9 [ 1741.479607] RSP: 002b:00007f15c4439168 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1741.487311] RAX: ffffffffffffffda RBX: 00007f15c5bd6f60 RCX: 00007f15c5ac40e9 21:50:37 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 7) 21:50:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x9cc00) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x9cc00) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) 21:50:37 executing program 4: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x8}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) 21:50:37 executing program 3: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) [ 1741.494567] RDX: 0000000000001808 RSI: 0000000000003000 RDI: 0000000000000000 [ 1741.501813] RBP: 00007f15c44391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.509061] R10: 0000000020ffd000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.516306] R13: 00007ffeec1bab6f R14: 00007f15c4439300 R15: 0000000000022000 21:50:37 executing program 4: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x8}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil}) 21:50:37 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="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", 0x1000}, 0x68) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001080)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}], 0x2c) shmget(0x2, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) r0 = gettid() kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x4, 0x80, 0x8, 0x3f, 0x41, 0x4, 0x0, 0x0, 0x49002, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xa7, 0x8001}, 0x10000, 0x69, 0x3, 0x5, 0x0, 0x4, 0x3ff, 0x0, 0x6, 0x0, 0x1}, r0, 0x10, 0xffffffffffffffff, 0xf) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fee000/0x1000)=nil) 21:50:37 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x401200) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) [ 1741.592298] FAULT_INJECTION: forcing a failure. [ 1741.592298] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.652105] CPU: 0 PID: 29801 Comm: syz-executor.0 Not tainted 4.14.277-syzkaller #0 [ 1741.660001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.669344] Call Trace: [ 1741.671927] dump_stack+0x1b2/0x281 [ 1741.675557] should_fail.cold+0x10a/0x149 [ 1741.679707] should_failslab+0xd6/0x130 [ 1741.683680] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1741.688343] apparmor_file_alloc_security+0x129/0x800 [ 1741.693530] security_file_alloc+0x66/0xa0 [ 1741.697763] ? selinux_is_enabled+0x5/0x50 [ 1741.701995] get_empty_filp+0x16b/0x3f0 [ 1741.705964] alloc_file+0x23/0x440 [ 1741.709504] hugetlb_file_setup+0x348/0x760 [ 1741.713823] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1741.719093] ? hugetlbfs_fill_super+0x950/0x950 [ 1741.723763] newseg+0x3d4/0xbb0 [ 1741.727044] ? shmctl_down+0x250/0x250 [ 1741.730931] ipcget+0xc6/0xb40 [ 1741.734132] ? __mutex_unlock_slowpath+0x75/0x770 [ 1741.739146] ? ipc_obtain_object_check+0xe0/0xe0 [ 1741.743919] ? vfs_write+0x319/0x4d0 [ 1741.747629] SyS_shmget+0xc3/0x100 [ 1741.751161] ? is_file_shm_hugepages+0x40/0x40 [ 1741.755741] ? __do_page_fault+0x159/0xad0 [ 1741.759969] ? do_syscall_64+0x4c/0x640 [ 1741.763934] ? is_file_shm_hugepages+0x40/0x40 [ 1741.768510] do_syscall_64+0x1d5/0x640 [ 1741.772399] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1741.777583] RIP: 0033:0x7f15c5ac40e9 [ 1741.781282] RSP: 002b:00007f15c4439168 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1741.788969] RAX: ffffffffffffffda RBX: 00007f15c5bd6f60 RCX: 00007f15c5ac40e9 21:50:37 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (fail_nth: 8) 21:50:37 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="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", 0x1000}, 0x68) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001080)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}], 0x2c) (async, rerun: 64) shmget(0x2, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = gettid() kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000001000)={0x4, 0x80, 0x8, 0x3f, 0x41, 0x4, 0x0, 0x0, 0x49002, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xa7, 0x8001}, 0x10000, 0x69, 0x3, 0x5, 0x0, 0x4, 0x3ff, 0x0, 0x6, 0x0, 0x1}, r0, 0x10, 0xffffffffffffffff, 0xf) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fee000/0x1000)=nil) 21:50:37 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x418343, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1404, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x801) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000000)={r2, 0xd2f9, 0xdc}) 21:50:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x401200) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 1) [ 1741.796219] RDX: 0000000000001808 RSI: 0000000000003000 RDI: 0000000000000000 [ 1741.803562] RBP: 00007f15c44391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.810817] R10: 0000000020ffd000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.818064] R13: 00007ffeec1bab6f R14: 00007f15c4439300 R15: 0000000000022000 21:50:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x401200) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x401200) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:37 executing program 0: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 21:50:37 executing program 4: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async, rerun: 32) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x418343, 0x0) (rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1404, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x801) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000000)={r2, 0xd2f9, 0xdc}) 21:50:37 executing program 0: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 21:50:37 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="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", 0x1000}, 0x68) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001080)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}], 0x2c) (async) shmget(0x2, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = gettid() kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001000)={0x4, 0x80, 0x8, 0x3f, 0x41, 0x4, 0x0, 0x0, 0x49002, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xa7, 0x8001}, 0x10000, 0x69, 0x3, 0x5, 0x0, 0x4, 0x3ff, 0x0, 0x6, 0x0, 0x1}, r0, 0x10, 0xffffffffffffffff, 0xf) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fee000/0x1000)=nil) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 21:50:37 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x418343, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1404, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x801) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000000)={r2, 0xd2f9, 0xdc}) 21:50:37 executing program 4: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 3: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000004) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x40002) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x3000, 0x1}) 21:50:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (rerun: 64) 21:50:37 executing program 0: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 21:50:37 executing program 4: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) 21:50:37 executing program 3: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000004) (async) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x40002) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x3000, 0x1}) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 21:50:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) 21:50:37 executing program 0: shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x82000000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r0, 0x3) 21:50:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 21:50:37 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 21:50:37 executing program 3: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000004) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x40002) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x3000, 0x1}) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000004) (async) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) (async) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x40002) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil}) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x3000, 0x1}) (async) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 21:50:37 executing program 0: shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) (async) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x82000000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r0, 0x3) 21:50:37 executing program 2: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 21:50:37 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil}) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) (async) 21:50:37 executing program 3: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) 21:50:37 executing program 2: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) 21:50:37 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil}) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:37 executing program 0: shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) (async) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x82000000) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r0, 0x3) 21:50:37 executing program 3: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) 21:50:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"cb2edb6cc7bd134d1f4aa22dd10c2768c52257ce3306a9a4c0b219112644b754"}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x20b30000000000, 0x20180) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000080)=""/116) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 21:50:37 executing program 2: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 21:50:37 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x4) mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x9, 0x110, r0, 0x82000000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) 21:50:37 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 21:50:37 executing program 3: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000) (async) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x4000)=nil) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) (async) 21:50:37 executing program 2: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 21:50:37 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x4) mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x9, 0x110, r0, 0x82000000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x4) (async) mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x9, 0x110, r0, 0x82000000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) (async) 21:50:37 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) 21:50:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"cb2edb6cc7bd134d1f4aa22dd10c2768c52257ce3306a9a4c0b219112644b754"}) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (rerun: 32) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async, rerun: 64) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x20b30000000000, 0x20180) (rerun: 64) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000080)=""/116) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 21:50:37 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) (async) 21:50:37 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 21:50:38 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) (async) 21:50:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"cb2edb6cc7bd134d1f4aa22dd10c2768c52257ce3306a9a4c0b219112644b754"}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x20b30000000000, 0x20180) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000080)=""/116) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"cb2edb6cc7bd134d1f4aa22dd10c2768c52257ce3306a9a4c0b219112644b754"}) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x20b30000000000, 0x20180) (async) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000080)=""/116) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 21:50:38 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x4) (async) mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x9, 0x110, r0, 0x82000000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3c934eb3bf470ea0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x140b, 0x20, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40) 21:50:38 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140b, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x6040024) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x3, 0x12]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd914fdcb7e9ea31f) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) 21:50:38 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) getsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@default, @null, @remote, @null, @netrom, @bcast]}, &(0x7f0000000100)=0x31, 0x80000) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) socket$vsock_dgram(0x28, 0x2, 0x0) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 21:50:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ffc000/0x1000)=nil}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0xc, 0x10, 0xffffffffffffffff, 0x0) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3c934eb3bf470ea0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x140b, 0x20, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40) 21:50:38 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140b, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x6040024) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x3, 0x12]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) (async) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd914fdcb7e9ea31f) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 21:50:38 executing program 2: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 21:50:38 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async, rerun: 32) getsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async, rerun: 64) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@default, @null, @remote, @null, @netrom, @bcast]}, &(0x7f0000000100)=0x31, 0x80000) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) socket$vsock_dgram(0x28, 0x2, 0x0) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3c934eb3bf470ea0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x140b, 0x20, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40) 21:50:38 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140b, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x6040024) (async) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x3, 0x12]) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd914fdcb7e9ea31f) (async, rerun: 64) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) (rerun: 64) 21:50:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ffc000/0x1000)=nil}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0xc, 0x10, 0xffffffffffffffff, 0x0) (rerun: 32) 21:50:38 executing program 2: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 2: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 1: sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="c80b2c47", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000005800a800243d7f56e696e3103463843b14e5a1412e94ce2584906985fa975a9252f721a633842881d75d03fff69eb989931f12509c24baf02440a012b707b1277bee3d90ecb272a499616a375fa9da784fb2542533d641330e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/175) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) shmget$private(0x0, 0x1000, 0x1511, &(0x7f0000ffb000/0x1000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x5, 0x3f, 0x4, 0x0, 0x0, 0x882, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x94, 0x101}, 0x4, 0xfff, 0x1, 0x8, 0x2, 0x1, 0x5, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x401) 21:50:38 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) getsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@default, @null, @remote, @null, @netrom, @bcast]}, &(0x7f0000000100)=0x31, 0x80000) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) socket$vsock_dgram(0x28, 0x2, 0x0) 21:50:38 executing program 1: sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="c80b2c47", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/175) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="c80b2c47", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000005800a800243d7f56e696e3103463843b14e5a1412e94ce2584906985fa975a9252f721a633842881d75d03fff69eb989931f12509c24baf02440a012b707b1277bee3d90ecb272a499616a375fa9da784fb2542533d641330e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x5}, {}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/175) (async) 21:50:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0xc, 0x10, 0xffffffffffffffff, 0x0) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) shmget$private(0x0, 0x1000, 0x1511, &(0x7f0000ffb000/0x1000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x5, 0x3f, 0x4, 0x0, 0x0, 0x882, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x94, 0x101}, 0x4, 0xfff, 0x1, 0x8, 0x2, 0x1, 0x5, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x401) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) (async) shmget$private(0x0, 0x1000, 0x1511, &(0x7f0000ffb000/0x1000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x5, 0x3f, 0x4, 0x0, 0x0, 0x882, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x94, 0x101}, 0x4, 0xfff, 0x1, 0x8, 0x2, 0x1, 0x5, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) (async) mmap$perf(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x401) (async) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 1: sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="c80b2c47", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/175) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="c80b2c47", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000005800a800243d7f56e696e3103463843b14e5a1412e94ce2584906985fa975a9252f721a633842881d75d03fff69eb989931f12509c24baf02440a012b707b1277bee3d90ecb272a499616a375fa9da784fb2542533d641330e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x5}, {}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/175) (async) 21:50:38 executing program 0: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001040)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x410600) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/4096) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 21:50:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x200, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0xfffffdd0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) shmget$private(0x0, 0x1000, 0x1511, &(0x7f0000ffb000/0x1000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x5, 0x3f, 0x4, 0x0, 0x0, 0x882, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x94, 0x101}, 0x4, 0xfff, 0x1, 0x8, 0x2, 0x1, 0x5, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x401) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) (async) shmget$private(0x0, 0x1000, 0x1511, &(0x7f0000ffb000/0x1000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x5, 0x3f, 0x4, 0x0, 0x0, 0x882, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x94, 0x101}, 0x4, 0xfff, 0x1, 0x8, 0x2, 0x1, 0x5, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) (async) mmap$perf(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x401) (async) 21:50:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x200, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0xfffffdd0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x200, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0xfffffdd0) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) (async) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) (async) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 21:50:38 executing program 0: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001040)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000}) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x410600) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/4096) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x3ff, 0x7f, 0x20, 0x8, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xe}, 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95a}, [@generic={0x9, 0x5, 0x0, 0x7, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x6153}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) 21:50:38 executing program 0: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001040)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000}) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x410600) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/4096) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:38 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x200, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0xfffffdd0) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x11c940, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000}) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x3ff, 0x7f, 0x20, 0x8, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xe}, 0x48) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95a}, [@generic={0x9, 0x5, 0x0, 0x7, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x6153}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) (rerun: 32) 21:50:38 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400300, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1411, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x9}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x58}}, 0x20008000) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x301202) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x810, r1, 0x82000000) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x11c940, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000}) 21:50:38 executing program 5: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xc05, 0x3]) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x3ff, 0x7f, 0x20, 0x8, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xe}, 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95a}, [@generic={0x9, 0x5, 0x0, 0x7, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x6153}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x3ff, 0x7f, 0x20, 0x8, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xe}, 0x48) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95a}, [@generic={0x9, 0x5, 0x0, 0x7, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x6153}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) (async) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x11c940, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x11c940, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000}) (async) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 5: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xc05, 0x3]) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) (async) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xc05, 0x3]) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) (async) 21:50:38 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400300, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1411, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x9}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x58}}, 0x20008000) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x301202) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x810, r1, 0x82000000) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0x4}, {0x2, 0x0, 0x2}]}) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400300, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1411, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x9}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x58}}, 0x20008000) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x301202) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x810, r1, 0x82000000) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0x4}, {0x2, 0x0, 0x2}]}) 21:50:38 executing program 5: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xc05, 0x3]) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) (async) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xc05, 0x3]) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) (async) 21:50:38 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 0: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) r0 = gettid() r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = epoll_create(0x400) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280d02, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r1, &(0x7f0000000040)={r2, r3, 0xffff}) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 21:50:38 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffff) 21:50:38 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0x4}, {0x2, 0x0, 0x2}]}) 21:50:38 executing program 5: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 21:50:39 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:39 executing program 5: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 0: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) r0 = gettid() (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = epoll_create(0x400) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280d02, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r1, &(0x7f0000000040)={r2, r3, 0xffff}) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 21:50:39 executing program 5: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (rerun: 32) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) (async) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 21:50:39 executing program 4: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 0: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) (async) r0 = gettid() (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = epoll_create(0x400) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280d02, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r1, &(0x7f0000000040)={r2, r3, 0xffff}) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 21:50:39 executing program 4: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil}) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 0: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$evdev(&(0x7f0000002200), 0x1, 0x800) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002140)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000001140)="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", 0xffe, r0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000021c0)={&(0x7f0000c77000/0x1000)=nil}) sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="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", 0xff, 0x40000, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x3, [@bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000140)=""/4096) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) 21:50:39 executing program 4: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil}) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x7f, 0x6, 0x1f, 0x7fffffff}]}) 21:50:39 executing program 0: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$evdev(&(0x7f0000002200), 0x1, 0x800) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002140)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000001140)="1a14cd416f208cacc0208762c9582c04f98e1df630f5b52819df4b2505aa0dcc990397b991bed3d738212a4a57c5d6ab9b9fd5587bc0feccbbf46c741381960dfc5aefb6fe683ce05d37b56f62966ed96d0ceb61143c65b723325f1354faef976d95ce26049e7e26959e2a4878669722451e7ad463e5ed9509de735a788718dded3815e1d075b434c889b1e3cecfdeb6c1dac1b228322418ca6ec3bdff710d3fbdbeaeb5084a4c9611ffaf24ab6e4d8cfce87fdb33277f6fcfc6134dda9e890f8cbb60fa8b8850eee991c1eb92689e28ec5fb450801b2745ac0acaea2c133c598358f68b48925bc0b228635be8eb83aed1e29a839add5e6390da6a74fa340ca74a871a797010c47846cb5747b31c6ac88e2d19dc22d79ab1457f09a8d455b927b8510de76a7726c1e86cd1a58cc2af141f8e46b125af9991a2093e42382e56bb9a03a115b795eaacc9fb08eb9002f1e2f992faa2fec79643621dc71b1278adbbb39e9d090afca553fce593d3ebc76cf19f8ad61a83d077a6596505e6c4bcda87b02c9ccad24ac6209a28c0f92333700c93d56c044fc7dedbbeef81039c55a3d8f7bc1221b292267d4539255d4a0b4556fc66838ad50a939eb4984c635a14b446d907c1dc14679964eb9d458bd2a638234ff9fdd0c80c742e4c7e890423c183ff20fe4a232f053f3f7f2bbb3d6673cd5a01205729e0cd04de3ed391e7d62f389b3bbf52b3e922a9ecae40d55e142ef9dc096711e6f987e77fee35c39a1507099259f420a583ca286620de3a9aa09a72c61700deb4c616deab42615b7d17934f1547b722e348f32c0e94d9794bbb6e6f69c62e3bc6169a601e5df71de7fa5d9e0bf6c6d36ac28a745763ea7f91743e7da64ad194cefec024bf32480a997ef99305f4374467d956a8afc783b05cab9a6775268685188bd1178114079cd47aba406c666b6d8ca73b13745fe4990a2f10e5e31d265d184949b0a54c7a5839a2b3ecca8c88285431293ddee0c5c9f137f96554db25c101fda3425ef8bd12eb83255b64dace467d403cb7fd6257d4027845d9e2b07356541e09ad43e8bbae74b28b19b0d55f732d6315ddedf73c5623bb3484bb9a85da699178b3c28daffd9d3d869869619c6f4a76d110b0205502b32ff6f20e45a1c0ab0fd571ebc967aedcf3f61f0e8b264721d690d4a5bd43699a4220f7e23bbdc0a757bde8fe4d737fc715baf1e0a8abd6da13a6e9b53ed00465262d3910a3f5415d3cb9d76d9354e62e6535f757b8ff4524820d2b04ed965c2d0db3943ae9691672e74bb806c6e88b01560279c89b3cae757de17c1cf22cd76c9d3aff61258a3204cf0a58da90715c46c6e3af82ec2822036b462f44783842c42a423ec2e510589ffa8a8e42c5a481a478e726011ead6f872297cb03571cf183f717fbc8692a962458ff2b3900ffad77db7001ec0363057cd26443d3a032c6f4cbaef29c3baa6a06cc18ae2a5152510a6a953c4597afed74cd7d16f94d605535c08c7f963929a8e478c25099b4441786b24ff43d3175a7ffea8f002c282fda7c37f51676376bf34bff1464658d9473a1367de04a9625e06a9306fdbd5d62a179a41e2102c7a233be5a01dbad4f53d70ef87f215ab526c06ac35d98110833ef58f47d35d50b7e1524d0c46f8781052aab42556ab71e315d43807b2432518257fa6b1c30b58eb1d60e93dbd89a04ed8a75779401d3cbe814a65b33f5d86b05afd9ed10b44451eae847c29e8e3addf631d5ca1f798229bf66014fc20e3f9f703fe9199f6dab1aaa7f8709369e68d7d2d632f05e9b8733d6b63d5f6b748b1d9a09dd88c0531f12617c4fc6820a8f4ef96c69a8b7797f2464ff9c2f0af78eef1a448804cfe9186a58b1eb1710db0fb7604bd95b1bf159647fa6e82130c0b2f1894690cb8c32a5b087cac50998d2e8e8d7a38d0750a6ebd6aa995761dd025ca1e3b72ed6ba397bcf718e72e247c88b6c5a00dfff3d87839e37eca98f6ab1fc0252070604ea8e67fb76d2d03f34486179b710e34e148bc0fc53a0ecb4a4692ccbeaa06dcc3a38a674dfd9b400697a72a5d04a6db45cfdd860658ce9b57d90166b0953b0a3b1a4a4c90c45516033a0882d5133140fe4686d43960f6a55eea27cd139243f885e5a63eb40324e4c07c8d4282a7296eb936808e7c81ffc6886539194ae3e736defbfc01165da8648b84605fc7ae1d0c0374340473564e796f5c682c890bd97abe67a5f8f7d04fa26be4dbc3371bebd6f2ad108c6dae0d382e313332ca8e343f156e45a83faa3ffe84d69c1b29f002100cc783508b6049d294c6c731baecc6e3bf9ece19641b0666f0f0753aef3ed22c31300d12bbde65beff94016ebc28fc06c7ed3c1ac471b656cdf0466401ad8ba56f828bfdda275bd5f3f617191533348d8648bc22cf09ea0011909f6c03e8cd7ebac84cfcb55496dbbfd26d7d54749ee8bd55fc47a9323e6eb912ae06a42174c30c40c59cb897609aef844a8bc1caa289245ba74ec59bbdf2ec4752381fce46795f31578944983b3ca713919567f25ddb21c48f7b9bed7b3d84020577f1f24b6076ec28aa9260b36b93e90b20aab54cee1757b942a2f7d27852530a479fa6688b62568a41ef57e53bc35feed2c735ad85cdcd5ebb24561e90a214beb0602dad4a18cde17313938036b5cd8875bbc7d88e254eb8b978505ca2033dcba6c87187426b579114695dde070669ef66ef27bf1f1ad2b6a29dca8fe6cca08f776379ceadc5dd7374153303c962c92f6ef86aaa346889ed847a7687f553228494935e03b987f50626cc647007d0475abd9786c63922428544059c72bb483889331d527492b1359fdfb673db3509d8d2d3271491b37bf2c07cf9e59b63df75abd5fcdfff83c1d06b6c78c46708398f0400e2269b0a1cd9a8a586efd831c44e3dfeaa0ecd93ab0f4a95c46a88d3069578b60d2d0c768ac138b97ee786c6959c7be043ec064b249e2be2b3a9ad21528a101dd9e39efe6118854e45044cb5b840a26179f0a466cc5e5bdb4d141c9705db3e09a457647c3614def7c0cbf81bbb161d4023c8c3dbf259533c0fb6c9cc0e7b6a54b2a1ec35aa014088e4a90049ebe23d2672dafeb1bc2b5f1440ab02be180fe34a0597a8e41c0b85b32e5531889ffed4495f0a8ab70bebea78f4b4492ccc2a543f715a41c358561e6a31d2cb70f8458239ec79a307692f5531227b5b625f5997456c19593c7fed5064517cda9925403ce480b2ba0145f7e09aa455bb8f59f69ec119315d85dc8e033a7652c48898d8fb07e9af9545d259c65dfa1dbb881421cb927348f78af99756f3c802c931f5b49c2ce771e018c7405de150ef72664ae0183dbae6652a96dbecf18e619c9968b4c23fdc205cee3fb8a1d9d67040e3c959e60a53d7cbc62b5bc9f7b8c851a0a90b532ffbffb7eb686ebf616884279bf4c636c80560a6eb23abac0623d22f2c1f08b309fb2b2d5e9c24433fe0d9d4c399dab5045c2060cc8f1ae6736a6f4ba4d2c6c04377b2d1c1b1fd8e9956ae8be746187490012788b005c49552c941664c6a87d12cb0f8acad1ae96a77c81fd9d1eae7ac7161ab88bdda1fd1f30ba2521812eed10abf3ac72f19f361659755363d5254af355f2ae7229b238c6b012c4b0ea1de8b221f2cead58ad2a4df9ef66a94cfe386928ebfd8b788679ddbfa6cd8f3c0ad64e8e4e7dbb8b089771d77a337c30ad897c34189355c0b87cd57c6ec4351ebf6c6151dba6a370b024855c5f569d6286cb5a466672a69b7d86e28b9beb2053207588019116b76d575e18e52319b583621c1605d087642ac91283e58ef4acd2860b68aa40bbbdb795f9e5fafd0f381a62f269ced8a299e77117298442d8f9d144c3c3ef4f0973d1adae6339786f6418000c0649aec2f17d680f55f555eba470d6368a868d5037b0958f0a519931d64b7c4dc93dead3e46be6b625f10c859c5b4180e2f5c505d44e9393422ae0e606a27f638d6a2681ee33aafb68fbac8ddd63c369e0e3fe9e1f30e85ac712f5a590739061e0c8c50f0333b994cd6a26a6752ea522d730c31c741e6ed98b04745df284d67e2d0f23e245ba610edc88a423c6d1347bd1875fb9a8b53fc2271ad826b9d587ab7ef466b4046b51e3cbeb89a7e02af1374af53fbbd0cc38e2658366546c636fd99cbd9109c650e2c79b9911b73811cd24eb8e23d113d930a82791dcb5595bd40ae6161193652b766512cc13c6a6c36786f02bd4a68595728fb4908851148e70a468006c0c6c288e4c2aefbe927af5cd330cc6452d7978695e25de38ceabf1d443b6e091fb03726a55f247748bf2c7d7adec7befc0bca7b019b5328f59bf390792c6a5fbd2cdc5fdfbc9e81e9b34330e839a0897429c0d0b9390d3e46b023fea0d6af35c899f7c7a3e865c285a6b39f0a22cf05390e1b1ca61104e67c3c524a96c38f1e94ef9151b8e0a462a96de2072e62a20bc96d4e4f0776851dc07f9eb1c28d0c436d2e35bed05723adf8911d7bd3acd70c2140cb1959eddba5133f4df635b6036f3cb34564616a20c51f690763abd67eb3a4c95cee7539f15cc8ee8e59a495804217992cc550525955512d319c7355bc1bdb404154ffbc17122b0282d8fc1cc569d7a42031b541a4f7ca9a43503f8a6fa16237ac486a7324e087416dc12e338dd4da958428aec43b4d3e4a032fc3cedf79c4eb3996c504fef57ada654b9407bc51e89a72ebed99ef80b882a03fdca8116af6ea47b746034425882b3344014cc49cb89c0041c6089e5be88dbd9757593f743943a350b848f208dffa6e887b9df17c337fbc768ef521cd4041f07a48b62fef6bd9d8da85eb8eb2d30395d83ff5050a1aac97edf597315dfb96abd55fc0cce635603cbb5b41768df70fca1399d039280c647c64563080461c76199013a8b235267e9a230d21a176a437b67f567cd8bce7f06f6ddc3dc433992601d616cd1b8bdc92ed18e7c20fdbc0fe75bc54529c276c12055f91be74a1803db1a64dab60c126e477be681d881a3e90c130ea0b53804dc735c8c224044054186e301fd715caf608289eab27e20692d3f743ce352ff8a017a29fe7e1c63b6fd710edbaa6b4f6ca31e19bd736a264920169aa865caee231c9632c89e4ff3d5d27881674dda117744012a63423fc1b46a7aaf1c2b5524f24706a58afecc04ab7fc67d957335cfd780dface11e22e276943e26996a315dd0c4839a887246d786616447e11e07e8933eb7d512702c5780e2f955cabfef685802d27d093c1040c24aa9ec44668e56226178122756b270c726eb0a063a2b75724b7d05313a1845ae4864ed4e1f878921a264f76e4515b94b327d7c453130078aa0241bd701b6ff86cde7a59592b6ecd78273b6f3d7d5387d0ce23e75c510aad746c48d91888e2978346046d1768cf0849aab5bb02b370cd2ed27202c5a0293d5412dd88e1048d3333d4607a998a50fb38f16c925bfef3f14df2b00cfa70009caaea7396ed8c3e6cfed551a934f60e1119de01dd9faec5868ebaf8a649f2a28bbcf878c17a7f712a6549c77eb0a22f273a5e072f5daee24b152d480bd113853587eae9e857f162d6aa0973bf11b81e1cc743ff7fabdb59e5a3a96a45cae68d3725443d4369b56ebe05bbb6eca5db733fc9237dd02995c9d3f683231a6247d518e1e29e0017a738675e72e8f96683922330fd82663ea254675e7a6e8ed9f702934eb214450e25af573b6efd3795100935e8e6cd9d0ef699570826e2043992536b21f48b919fcdb3700dea6e47901e86211c1e9f45f", 0xffe, r0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000021c0)={&(0x7f0000c77000/0x1000)=nil}) sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="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", 0xff, 0x40000, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x3, [@bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000140)=""/4096) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) (async) syz_open_dev$evdev(&(0x7f0000002200), 0x1, 0x800) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002140)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000001140)="1a14cd416f208cacc0208762c9582c04f98e1df630f5b52819df4b2505aa0dcc990397b991bed3d738212a4a57c5d6ab9b9fd5587bc0feccbbf46c741381960dfc5aefb6fe683ce05d37b56f62966ed96d0ceb61143c65b723325f1354faef976d95ce26049e7e26959e2a4878669722451e7ad463e5ed9509de735a788718dded3815e1d075b434c889b1e3cecfdeb6c1dac1b228322418ca6ec3bdff710d3fbdbeaeb5084a4c9611ffaf24ab6e4d8cfce87fdb33277f6fcfc6134dda9e890f8cbb60fa8b8850eee991c1eb92689e28ec5fb450801b2745ac0acaea2c133c598358f68b48925bc0b228635be8eb83aed1e29a839add5e6390da6a74fa340ca74a871a797010c47846cb5747b31c6ac88e2d19dc22d79ab1457f09a8d455b927b8510de76a7726c1e86cd1a58cc2af141f8e46b125af9991a2093e42382e56bb9a03a115b795eaacc9fb08eb9002f1e2f992faa2fec79643621dc71b1278adbbb39e9d090afca553fce593d3ebc76cf19f8ad61a83d077a6596505e6c4bcda87b02c9ccad24ac6209a28c0f92333700c93d56c044fc7dedbbeef81039c55a3d8f7bc1221b292267d4539255d4a0b4556fc66838ad50a939eb4984c635a14b446d907c1dc14679964eb9d458bd2a638234ff9fdd0c80c742e4c7e890423c183ff20fe4a232f053f3f7f2bbb3d6673cd5a01205729e0cd04de3ed391e7d62f389b3bbf52b3e922a9ecae40d55e142ef9dc096711e6f987e77fee35c39a1507099259f420a583ca286620de3a9aa09a72c61700deb4c616deab42615b7d17934f1547b722e348f32c0e94d9794bbb6e6f69c62e3bc6169a601e5df71de7fa5d9e0bf6c6d36ac28a745763ea7f91743e7da64ad194cefec024bf32480a997ef99305f4374467d956a8afc783b05cab9a6775268685188bd1178114079cd47aba406c666b6d8ca73b13745fe4990a2f10e5e31d265d184949b0a54c7a5839a2b3ecca8c88285431293ddee0c5c9f137f96554db25c101fda3425ef8bd12eb83255b64dace467d403cb7fd6257d4027845d9e2b07356541e09ad43e8bbae74b28b19b0d55f732d6315ddedf73c5623bb3484bb9a85da699178b3c28daffd9d3d869869619c6f4a76d110b0205502b32ff6f20e45a1c0ab0fd571ebc967aedcf3f61f0e8b264721d690d4a5bd43699a4220f7e23bbdc0a757bde8fe4d737fc715baf1e0a8abd6da13a6e9b53ed00465262d3910a3f5415d3cb9d76d9354e62e6535f757b8ff4524820d2b04ed965c2d0db3943ae9691672e74bb806c6e88b01560279c89b3cae757de17c1cf22cd76c9d3aff61258a3204cf0a58da90715c46c6e3af82ec2822036b462f44783842c42a423ec2e510589ffa8a8e42c5a481a478e726011ead6f872297cb03571cf183f717fbc8692a962458ff2b3900ffad77db7001ec0363057cd26443d3a032c6f4cbaef29c3baa6a06cc18ae2a5152510a6a953c4597afed74cd7d16f94d605535c08c7f963929a8e478c25099b4441786b24ff43d3175a7ffea8f002c282fda7c37f51676376bf34bff1464658d9473a1367de04a9625e06a9306fdbd5d62a179a41e2102c7a233be5a01dbad4f53d70ef87f215ab526c06ac35d98110833ef58f47d35d50b7e1524d0c46f8781052aab42556ab71e315d43807b2432518257fa6b1c30b58eb1d60e93dbd89a04ed8a75779401d3cbe814a65b33f5d86b05afd9ed10b44451eae847c29e8e3addf631d5ca1f798229bf66014fc20e3f9f703fe9199f6dab1aaa7f8709369e68d7d2d632f05e9b8733d6b63d5f6b748b1d9a09dd88c0531f12617c4fc6820a8f4ef96c69a8b7797f2464ff9c2f0af78eef1a448804cfe9186a58b1eb1710db0fb7604bd95b1bf159647fa6e82130c0b2f1894690cb8c32a5b087cac50998d2e8e8d7a38d0750a6ebd6aa995761dd025ca1e3b72ed6ba397bcf718e72e247c88b6c5a00dfff3d87839e37eca98f6ab1fc0252070604ea8e67fb76d2d03f34486179b710e34e148bc0fc53a0ecb4a4692ccbeaa06dcc3a38a674dfd9b400697a72a5d04a6db45cfdd860658ce9b57d90166b0953b0a3b1a4a4c90c45516033a0882d5133140fe4686d43960f6a55eea27cd139243f885e5a63eb40324e4c07c8d4282a7296eb936808e7c81ffc6886539194ae3e736defbfc01165da8648b84605fc7ae1d0c0374340473564e796f5c682c890bd97abe67a5f8f7d04fa26be4dbc3371bebd6f2ad108c6dae0d382e313332ca8e343f156e45a83faa3ffe84d69c1b29f002100cc783508b6049d294c6c731baecc6e3bf9ece19641b0666f0f0753aef3ed22c31300d12bbde65beff94016ebc28fc06c7ed3c1ac471b656cdf0466401ad8ba56f828bfdda275bd5f3f617191533348d8648bc22cf09ea0011909f6c03e8cd7ebac84cfcb55496dbbfd26d7d54749ee8bd55fc47a9323e6eb912ae06a42174c30c40c59cb897609aef844a8bc1caa289245ba74ec59bbdf2ec4752381fce46795f31578944983b3ca713919567f25ddb21c48f7b9bed7b3d84020577f1f24b6076ec28aa9260b36b93e90b20aab54cee1757b942a2f7d27852530a479fa6688b62568a41ef57e53bc35feed2c735ad85cdcd5ebb24561e90a214beb0602dad4a18cde17313938036b5cd8875bbc7d88e254eb8b978505ca2033dcba6c87187426b579114695dde070669ef66ef27bf1f1ad2b6a29dca8fe6cca08f776379ceadc5dd7374153303c962c92f6ef86aaa346889ed847a7687f553228494935e03b987f50626cc647007d0475abd9786c63922428544059c72bb483889331d527492b1359fdfb673db3509d8d2d3271491b37bf2c07cf9e59b63df75abd5fcdfff83c1d06b6c78c46708398f0400e2269b0a1cd9a8a586efd831c44e3dfeaa0ecd93ab0f4a95c46a88d3069578b60d2d0c768ac138b97ee786c6959c7be043ec064b249e2be2b3a9ad21528a101dd9e39efe6118854e45044cb5b840a26179f0a466cc5e5bdb4d141c9705db3e09a457647c3614def7c0cbf81bbb161d4023c8c3dbf259533c0fb6c9cc0e7b6a54b2a1ec35aa014088e4a90049ebe23d2672dafeb1bc2b5f1440ab02be180fe34a0597a8e41c0b85b32e5531889ffed4495f0a8ab70bebea78f4b4492ccc2a543f715a41c358561e6a31d2cb70f8458239ec79a307692f5531227b5b625f5997456c19593c7fed5064517cda9925403ce480b2ba0145f7e09aa455bb8f59f69ec119315d85dc8e033a7652c48898d8fb07e9af9545d259c65dfa1dbb881421cb927348f78af99756f3c802c931f5b49c2ce771e018c7405de150ef72664ae0183dbae6652a96dbecf18e619c9968b4c23fdc205cee3fb8a1d9d67040e3c959e60a53d7cbc62b5bc9f7b8c851a0a90b532ffbffb7eb686ebf616884279bf4c636c80560a6eb23abac0623d22f2c1f08b309fb2b2d5e9c24433fe0d9d4c399dab5045c2060cc8f1ae6736a6f4ba4d2c6c04377b2d1c1b1fd8e9956ae8be746187490012788b005c49552c941664c6a87d12cb0f8acad1ae96a77c81fd9d1eae7ac7161ab88bdda1fd1f30ba2521812eed10abf3ac72f19f361659755363d5254af355f2ae7229b238c6b012c4b0ea1de8b221f2cead58ad2a4df9ef66a94cfe386928ebfd8b788679ddbfa6cd8f3c0ad64e8e4e7dbb8b089771d77a337c30ad897c34189355c0b87cd57c6ec4351ebf6c6151dba6a370b024855c5f569d6286cb5a466672a69b7d86e28b9beb2053207588019116b76d575e18e52319b583621c1605d087642ac91283e58ef4acd2860b68aa40bbbdb795f9e5fafd0f381a62f269ced8a299e77117298442d8f9d144c3c3ef4f0973d1adae6339786f6418000c0649aec2f17d680f55f555eba470d6368a868d5037b0958f0a519931d64b7c4dc93dead3e46be6b625f10c859c5b4180e2f5c505d44e9393422ae0e606a27f638d6a2681ee33aafb68fbac8ddd63c369e0e3fe9e1f30e85ac712f5a590739061e0c8c50f0333b994cd6a26a6752ea522d730c31c741e6ed98b04745df284d67e2d0f23e245ba610edc88a423c6d1347bd1875fb9a8b53fc2271ad826b9d587ab7ef466b4046b51e3cbeb89a7e02af1374af53fbbd0cc38e2658366546c636fd99cbd9109c650e2c79b9911b73811cd24eb8e23d113d930a82791dcb5595bd40ae6161193652b766512cc13c6a6c36786f02bd4a68595728fb4908851148e70a468006c0c6c288e4c2aefbe927af5cd330cc6452d7978695e25de38ceabf1d443b6e091fb03726a55f247748bf2c7d7adec7befc0bca7b019b5328f59bf390792c6a5fbd2cdc5fdfbc9e81e9b34330e839a0897429c0d0b9390d3e46b023fea0d6af35c899f7c7a3e865c285a6b39f0a22cf05390e1b1ca61104e67c3c524a96c38f1e94ef9151b8e0a462a96de2072e62a20bc96d4e4f0776851dc07f9eb1c28d0c436d2e35bed05723adf8911d7bd3acd70c2140cb1959eddba5133f4df635b6036f3cb34564616a20c51f690763abd67eb3a4c95cee7539f15cc8ee8e59a495804217992cc550525955512d319c7355bc1bdb404154ffbc17122b0282d8fc1cc569d7a42031b541a4f7ca9a43503f8a6fa16237ac486a7324e087416dc12e338dd4da958428aec43b4d3e4a032fc3cedf79c4eb3996c504fef57ada654b9407bc51e89a72ebed99ef80b882a03fdca8116af6ea47b746034425882b3344014cc49cb89c0041c6089e5be88dbd9757593f743943a350b848f208dffa6e887b9df17c337fbc768ef521cd4041f07a48b62fef6bd9d8da85eb8eb2d30395d83ff5050a1aac97edf597315dfb96abd55fc0cce635603cbb5b41768df70fca1399d039280c647c64563080461c76199013a8b235267e9a230d21a176a437b67f567cd8bce7f06f6ddc3dc433992601d616cd1b8bdc92ed18e7c20fdbc0fe75bc54529c276c12055f91be74a1803db1a64dab60c126e477be681d881a3e90c130ea0b53804dc735c8c224044054186e301fd715caf608289eab27e20692d3f743ce352ff8a017a29fe7e1c63b6fd710edbaa6b4f6ca31e19bd736a264920169aa865caee231c9632c89e4ff3d5d27881674dda117744012a63423fc1b46a7aaf1c2b5524f24706a58afecc04ab7fc67d957335cfd780dface11e22e276943e26996a315dd0c4839a887246d786616447e11e07e8933eb7d512702c5780e2f955cabfef685802d27d093c1040c24aa9ec44668e56226178122756b270c726eb0a063a2b75724b7d05313a1845ae4864ed4e1f878921a264f76e4515b94b327d7c453130078aa0241bd701b6ff86cde7a59592b6ecd78273b6f3d7d5387d0ce23e75c510aad746c48d91888e2978346046d1768cf0849aab5bb02b370cd2ed27202c5a0293d5412dd88e1048d3333d4607a998a50fb38f16c925bfef3f14df2b00cfa70009caaea7396ed8c3e6cfed551a934f60e1119de01dd9faec5868ebaf8a649f2a28bbcf878c17a7f712a6549c77eb0a22f273a5e072f5daee24b152d480bd113853587eae9e857f162d6aa0973bf11b81e1cc743ff7fabdb59e5a3a96a45cae68d3725443d4369b56ebe05bbb6eca5db733fc9237dd02995c9d3f683231a6247d518e1e29e0017a738675e72e8f96683922330fd82663ea254675e7a6e8ed9f702934eb214450e25af573b6efd3795100935e8e6cd9d0ef699570826e2043992536b21f48b919fcdb3700dea6e47901e86211c1e9f45f", 0xffe, r0}, 0x68) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000021c0)={&(0x7f0000c77000/0x1000)=nil}) (async) sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="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", 0xff, 0x40000, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x3, [@bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) (async) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000140)=""/4096) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) (async) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:39 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) shmget$private(0x0, 0x4000, 0x7f, &(0x7f0000ff9000/0x4000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x7f, 0x6, 0x1f, 0x7fffffff}]}) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) (async) 21:50:39 executing program 0: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$evdev(&(0x7f0000002200), 0x1, 0x800) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002140)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000001140)="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", 0xffe, r0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000021c0)={&(0x7f0000c77000/0x1000)=nil}) sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="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", 0xff, 0x40000, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x3, [@bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000140)=""/4096) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) (async) syz_open_dev$evdev(&(0x7f0000002200), 0x1, 0x800) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002140)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000001140)="1a14cd416f208cacc0208762c9582c04f98e1df630f5b52819df4b2505aa0dcc990397b991bed3d738212a4a57c5d6ab9b9fd5587bc0feccbbf46c741381960dfc5aefb6fe683ce05d37b56f62966ed96d0ceb61143c65b723325f1354faef976d95ce26049e7e26959e2a4878669722451e7ad463e5ed9509de735a788718dded3815e1d075b434c889b1e3cecfdeb6c1dac1b228322418ca6ec3bdff710d3fbdbeaeb5084a4c9611ffaf24ab6e4d8cfce87fdb33277f6fcfc6134dda9e890f8cbb60fa8b8850eee991c1eb92689e28ec5fb450801b2745ac0acaea2c133c598358f68b48925bc0b228635be8eb83aed1e29a839add5e6390da6a74fa340ca74a871a797010c47846cb5747b31c6ac88e2d19dc22d79ab1457f09a8d455b927b8510de76a7726c1e86cd1a58cc2af141f8e46b125af9991a2093e42382e56bb9a03a115b795eaacc9fb08eb9002f1e2f992faa2fec79643621dc71b1278adbbb39e9d090afca553fce593d3ebc76cf19f8ad61a83d077a6596505e6c4bcda87b02c9ccad24ac6209a28c0f92333700c93d56c044fc7dedbbeef81039c55a3d8f7bc1221b292267d4539255d4a0b4556fc66838ad50a939eb4984c635a14b446d907c1dc14679964eb9d458bd2a638234ff9fdd0c80c742e4c7e890423c183ff20fe4a232f053f3f7f2bbb3d6673cd5a01205729e0cd04de3ed391e7d62f389b3bbf52b3e922a9ecae40d55e142ef9dc096711e6f987e77fee35c39a1507099259f420a583ca286620de3a9aa09a72c61700deb4c616deab42615b7d17934f1547b722e348f32c0e94d9794bbb6e6f69c62e3bc6169a601e5df71de7fa5d9e0bf6c6d36ac28a745763ea7f91743e7da64ad194cefec024bf32480a997ef99305f4374467d956a8afc783b05cab9a6775268685188bd1178114079cd47aba406c666b6d8ca73b13745fe4990a2f10e5e31d265d184949b0a54c7a5839a2b3ecca8c88285431293ddee0c5c9f137f96554db25c101fda3425ef8bd12eb83255b64dace467d403cb7fd6257d4027845d9e2b07356541e09ad43e8bbae74b28b19b0d55f732d6315ddedf73c5623bb3484bb9a85da699178b3c28daffd9d3d869869619c6f4a76d110b0205502b32ff6f20e45a1c0ab0fd571ebc967aedcf3f61f0e8b264721d690d4a5bd43699a4220f7e23bbdc0a757bde8fe4d737fc715baf1e0a8abd6da13a6e9b53ed00465262d3910a3f5415d3cb9d76d9354e62e6535f757b8ff4524820d2b04ed965c2d0db3943ae9691672e74bb806c6e88b01560279c89b3cae757de17c1cf22cd76c9d3aff61258a3204cf0a58da90715c46c6e3af82ec2822036b462f44783842c42a423ec2e510589ffa8a8e42c5a481a478e726011ead6f872297cb03571cf183f717fbc8692a962458ff2b3900ffad77db7001ec0363057cd26443d3a032c6f4cbaef29c3baa6a06cc18ae2a5152510a6a953c4597afed74cd7d16f94d605535c08c7f963929a8e478c25099b4441786b24ff43d3175a7ffea8f002c282fda7c37f51676376bf34bff1464658d9473a1367de04a9625e06a9306fdbd5d62a179a41e2102c7a233be5a01dbad4f53d70ef87f215ab526c06ac35d98110833ef58f47d35d50b7e1524d0c46f8781052aab42556ab71e315d43807b2432518257fa6b1c30b58eb1d60e93dbd89a04ed8a75779401d3cbe814a65b33f5d86b05afd9ed10b44451eae847c29e8e3addf631d5ca1f798229bf66014fc20e3f9f703fe9199f6dab1aaa7f8709369e68d7d2d632f05e9b8733d6b63d5f6b748b1d9a09dd88c0531f12617c4fc6820a8f4ef96c69a8b7797f2464ff9c2f0af78eef1a448804cfe9186a58b1eb1710db0fb7604bd95b1bf159647fa6e82130c0b2f1894690cb8c32a5b087cac50998d2e8e8d7a38d0750a6ebd6aa995761dd025ca1e3b72ed6ba397bcf718e72e247c88b6c5a00dfff3d87839e37eca98f6ab1fc0252070604ea8e67fb76d2d03f34486179b710e34e148bc0fc53a0ecb4a4692ccbeaa06dcc3a38a674dfd9b400697a72a5d04a6db45cfdd860658ce9b57d90166b0953b0a3b1a4a4c90c45516033a0882d5133140fe4686d43960f6a55eea27cd139243f885e5a63eb40324e4c07c8d4282a7296eb936808e7c81ffc6886539194ae3e736defbfc01165da8648b84605fc7ae1d0c0374340473564e796f5c682c890bd97abe67a5f8f7d04fa26be4dbc3371bebd6f2ad108c6dae0d382e313332ca8e343f156e45a83faa3ffe84d69c1b29f002100cc783508b6049d294c6c731baecc6e3bf9ece19641b0666f0f0753aef3ed22c31300d12bbde65beff94016ebc28fc06c7ed3c1ac471b656cdf0466401ad8ba56f828bfdda275bd5f3f617191533348d8648bc22cf09ea0011909f6c03e8cd7ebac84cfcb55496dbbfd26d7d54749ee8bd55fc47a9323e6eb912ae06a42174c30c40c59cb897609aef844a8bc1caa289245ba74ec59bbdf2ec4752381fce46795f31578944983b3ca713919567f25ddb21c48f7b9bed7b3d84020577f1f24b6076ec28aa9260b36b93e90b20aab54cee1757b942a2f7d27852530a479fa6688b62568a41ef57e53bc35feed2c735ad85cdcd5ebb24561e90a214beb0602dad4a18cde17313938036b5cd8875bbc7d88e254eb8b978505ca2033dcba6c87187426b579114695dde070669ef66ef27bf1f1ad2b6a29dca8fe6cca08f776379ceadc5dd7374153303c962c92f6ef86aaa346889ed847a7687f553228494935e03b987f50626cc647007d0475abd9786c63922428544059c72bb483889331d527492b1359fdfb673db3509d8d2d3271491b37bf2c07cf9e59b63df75abd5fcdfff83c1d06b6c78c46708398f0400e2269b0a1cd9a8a586efd831c44e3dfeaa0ecd93ab0f4a95c46a88d3069578b60d2d0c768ac138b97ee786c6959c7be043ec064b249e2be2b3a9ad21528a101dd9e39efe6118854e45044cb5b840a26179f0a466cc5e5bdb4d141c9705db3e09a457647c3614def7c0cbf81bbb161d4023c8c3dbf259533c0fb6c9cc0e7b6a54b2a1ec35aa014088e4a90049ebe23d2672dafeb1bc2b5f1440ab02be180fe34a0597a8e41c0b85b32e5531889ffed4495f0a8ab70bebea78f4b4492ccc2a543f715a41c358561e6a31d2cb70f8458239ec79a307692f5531227b5b625f5997456c19593c7fed5064517cda9925403ce480b2ba0145f7e09aa455bb8f59f69ec119315d85dc8e033a7652c48898d8fb07e9af9545d259c65dfa1dbb881421cb927348f78af99756f3c802c931f5b49c2ce771e018c7405de150ef72664ae0183dbae6652a96dbecf18e619c9968b4c23fdc205cee3fb8a1d9d67040e3c959e60a53d7cbc62b5bc9f7b8c851a0a90b532ffbffb7eb686ebf616884279bf4c636c80560a6eb23abac0623d22f2c1f08b309fb2b2d5e9c24433fe0d9d4c399dab5045c2060cc8f1ae6736a6f4ba4d2c6c04377b2d1c1b1fd8e9956ae8be746187490012788b005c49552c941664c6a87d12cb0f8acad1ae96a77c81fd9d1eae7ac7161ab88bdda1fd1f30ba2521812eed10abf3ac72f19f361659755363d5254af355f2ae7229b238c6b012c4b0ea1de8b221f2cead58ad2a4df9ef66a94cfe386928ebfd8b788679ddbfa6cd8f3c0ad64e8e4e7dbb8b089771d77a337c30ad897c34189355c0b87cd57c6ec4351ebf6c6151dba6a370b024855c5f569d6286cb5a466672a69b7d86e28b9beb2053207588019116b76d575e18e52319b583621c1605d087642ac91283e58ef4acd2860b68aa40bbbdb795f9e5fafd0f381a62f269ced8a299e77117298442d8f9d144c3c3ef4f0973d1adae6339786f6418000c0649aec2f17d680f55f555eba470d6368a868d5037b0958f0a519931d64b7c4dc93dead3e46be6b625f10c859c5b4180e2f5c505d44e9393422ae0e606a27f638d6a2681ee33aafb68fbac8ddd63c369e0e3fe9e1f30e85ac712f5a590739061e0c8c50f0333b994cd6a26a6752ea522d730c31c741e6ed98b04745df284d67e2d0f23e245ba610edc88a423c6d1347bd1875fb9a8b53fc2271ad826b9d587ab7ef466b4046b51e3cbeb89a7e02af1374af53fbbd0cc38e2658366546c636fd99cbd9109c650e2c79b9911b73811cd24eb8e23d113d930a82791dcb5595bd40ae6161193652b766512cc13c6a6c36786f02bd4a68595728fb4908851148e70a468006c0c6c288e4c2aefbe927af5cd330cc6452d7978695e25de38ceabf1d443b6e091fb03726a55f247748bf2c7d7adec7befc0bca7b019b5328f59bf390792c6a5fbd2cdc5fdfbc9e81e9b34330e839a0897429c0d0b9390d3e46b023fea0d6af35c899f7c7a3e865c285a6b39f0a22cf05390e1b1ca61104e67c3c524a96c38f1e94ef9151b8e0a462a96de2072e62a20bc96d4e4f0776851dc07f9eb1c28d0c436d2e35bed05723adf8911d7bd3acd70c2140cb1959eddba5133f4df635b6036f3cb34564616a20c51f690763abd67eb3a4c95cee7539f15cc8ee8e59a495804217992cc550525955512d319c7355bc1bdb404154ffbc17122b0282d8fc1cc569d7a42031b541a4f7ca9a43503f8a6fa16237ac486a7324e087416dc12e338dd4da958428aec43b4d3e4a032fc3cedf79c4eb3996c504fef57ada654b9407bc51e89a72ebed99ef80b882a03fdca8116af6ea47b746034425882b3344014cc49cb89c0041c6089e5be88dbd9757593f743943a350b848f208dffa6e887b9df17c337fbc768ef521cd4041f07a48b62fef6bd9d8da85eb8eb2d30395d83ff5050a1aac97edf597315dfb96abd55fc0cce635603cbb5b41768df70fca1399d039280c647c64563080461c76199013a8b235267e9a230d21a176a437b67f567cd8bce7f06f6ddc3dc433992601d616cd1b8bdc92ed18e7c20fdbc0fe75bc54529c276c12055f91be74a1803db1a64dab60c126e477be681d881a3e90c130ea0b53804dc735c8c224044054186e301fd715caf608289eab27e20692d3f743ce352ff8a017a29fe7e1c63b6fd710edbaa6b4f6ca31e19bd736a264920169aa865caee231c9632c89e4ff3d5d27881674dda117744012a63423fc1b46a7aaf1c2b5524f24706a58afecc04ab7fc67d957335cfd780dface11e22e276943e26996a315dd0c4839a887246d786616447e11e07e8933eb7d512702c5780e2f955cabfef685802d27d093c1040c24aa9ec44668e56226178122756b270c726eb0a063a2b75724b7d05313a1845ae4864ed4e1f878921a264f76e4515b94b327d7c453130078aa0241bd701b6ff86cde7a59592b6ecd78273b6f3d7d5387d0ce23e75c510aad746c48d91888e2978346046d1768cf0849aab5bb02b370cd2ed27202c5a0293d5412dd88e1048d3333d4607a998a50fb38f16c925bfef3f14df2b00cfa70009caaea7396ed8c3e6cfed551a934f60e1119de01dd9faec5868ebaf8a649f2a28bbcf878c17a7f712a6549c77eb0a22f273a5e072f5daee24b152d480bd113853587eae9e857f162d6aa0973bf11b81e1cc743ff7fabdb59e5a3a96a45cae68d3725443d4369b56ebe05bbb6eca5db733fc9237dd02995c9d3f683231a6247d518e1e29e0017a738675e72e8f96683922330fd82663ea254675e7a6e8ed9f702934eb214450e25af573b6efd3795100935e8e6cd9d0ef699570826e2043992536b21f48b919fcdb3700dea6e47901e86211c1e9f45f", 0xffe, r0}, 0x68) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000021c0)={&(0x7f0000c77000/0x1000)=nil}) (async) sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="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", 0xff, 0x40000, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x3, [@bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) (async) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000140)=""/4096) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) (async) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) shmget$private(0x0, 0x4000, 0x7f, &(0x7f0000ff9000/0x4000)=nil) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x7f, 0x6, 0x1f, 0x7fffffff}]}) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x2}) 21:50:39 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) shmget$private(0x0, 0x4000, 0x7f, &(0x7f0000ff9000/0x4000)=nil) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:50:39 executing program 0: shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x74e, 0x0, 0x8, 0x1, 0x2, 0x3}) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) 21:50:39 executing program 4: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140b, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8805}, 0xc040) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x2}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x2}) (async) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 0: shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) (async) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x74e, 0x0, 0x8, 0x1, 0x2, 0x3}) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) (async) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x2}) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) 21:50:39 executing program 0: shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) (async, rerun: 64) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (rerun: 64) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x74e, 0x0, 0x8, 0x1, 0x2, 0x3}) 21:50:39 executing program 4: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140b, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8805}, 0xc040) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x60}}, 0x0) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xff, 0x2000) mmap$snddsp_status(&(0x7f0000c00000/0x400000)=nil, 0x1000, 0x1000000, 0x100010, r0, 0x82000000) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 0: r0 = gettid() kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, r3, 0x69}) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x60}}, 0x0) (async) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xff, 0x2000) mmap$snddsp_status(&(0x7f0000c00000/0x400000)=nil, 0x1000, 0x1000000, 0x100010, r0, 0x82000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xff, 0x2000) (async) mmap$snddsp_status(&(0x7f0000c00000/0x400000)=nil, 0x1000, 0x1000000, 0x100010, r0, 0x82000000) (async) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:50:39 executing program 0: r0 = gettid() kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, r3, 0x69}) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) gettid() (async) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, r3, 0x69}) (async) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) (async) 21:50:39 executing program 4: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140b, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8805}, 0xc040) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140b, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8805}, 0xc040) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) 21:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x60}}, 0x0) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:39 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xff, 0x2000) mmap$snddsp_status(&(0x7f0000c00000/0x400000)=nil, 0x1000, 0x1000000, 0x100010, r0, 0x82000000) 21:50:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x60}}, 0x0) 21:50:39 executing program 0: r0 = gettid() kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, r3, 0x69}) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) gettid() (async) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, r3, 0x69}) (async) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) (async) 21:50:39 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x4, 0x6, 0x98, 0xff, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x0, 0xfffffdda, 0x7, 0x8, 0x6, 0x96, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x50, r2, 0x9) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 0: shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) 21:50:40 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x101, 0x7f, 0x4}, {0x1, 0xe, 0x7, 0x913}, {0x2764, 0x9, 0x6b, 0x1}, {0x0, 0x3, 0x6, 0x80}, {0x2, 0x1f, 0x5, 0x800}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2}) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000540)={0x20, 0x0, 0x62d, 0x7, 0x7f, 0x803ab}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x5, 0x5, 0x7, 0x101, 0x7fffffffffffffff], 0x2}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 21:50:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x3) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffff}]}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008) 21:50:40 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) (async, rerun: 32) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x4, 0x6, 0x98, 0xff, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x0, 0xfffffdda, 0x7, 0x8, 0x6, 0x96, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) (rerun: 64) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x50, r2, 0x9) 21:50:40 executing program 0: shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x3) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffff}]}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008) 21:50:40 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x101, 0x7f, 0x4}, {0x1, 0xe, 0x7, 0x913}, {0x2764, 0x9, 0x6b, 0x1}, {0x0, 0x3, 0x6, 0x80}, {0x2, 0x1f, 0x5, 0x800}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2}) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000540)={0x20, 0x0, 0x62d, 0x7, 0x7f, 0x803ab}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x5, 0x5, 0x7, 0x101, 0x7fffffffffffffff], 0x2}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x101, 0x7f, 0x4}, {0x1, 0xe, 0x7, 0x913}, {0x2764, 0x9, 0x6b, 0x1}, {0x0, 0x3, 0x6, 0x80}, {0x2, 0x1f, 0x5, 0x800}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2}) (async) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000540)={0x20, 0x0, 0x62d, 0x7, 0x7f, 0x803ab}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x5, 0x5, 0x7, 0x101, 0x7fffffffffffffff], 0x2}) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) 21:50:40 executing program 0: shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x4, 0x6, 0x98, 0xff, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x0, 0xfffffdda, 0x7, 0x8, 0x6, 0x96, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x50, r2, 0x9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) (async) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) (async) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x4, 0x6, 0x98, 0xff, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x0, 0xfffffdda, 0x7, 0x8, 0x6, 0x96, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) (async) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x50, r2, 0x9) (async) 21:50:40 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="77fe8b854fbee7e0523e3c04182ec20169ac453e57ba04aa2b4052930640a614df995025bf1e3a95ea1b8fb8c6c74e626671269eeb6bab3a73d2abb391d59bdce8695aaec91142ad25812a508261befa4a79cd3fa8f8adef9fd9ec2e7b3ce7d71edd32c3cd", 0x65, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140), 0x82502, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x40}) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0x9, 0x80]) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x101, 0x7f, 0x4}, {0x1, 0xe, 0x7, 0x913}, {0x2764, 0x9, 0x6b, 0x1}, {0x0, 0x3, 0x6, 0x80}, {0x2, 0x1f, 0x5, 0x800}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2}) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000540)={0x20, 0x0, 0x62d, 0x7, 0x7f, 0x803ab}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x5, 0x5, 0x7, 0x101, 0x7fffffffffffffff], 0x2}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x101, 0x7f, 0x4}, {0x1, 0xe, 0x7, 0x913}, {0x2764, 0x9, 0x6b, 0x1}, {0x0, 0x3, 0x6, 0x80}, {0x2, 0x1f, 0x5, 0x800}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2}) (async) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000540)={0x20, 0x0, 0x62d, 0x7, 0x7f, 0x803ab}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x5, 0x5, 0x7, 0x101, 0x7fffffffffffffff], 0x2}) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) 21:50:40 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x3) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffff}]}) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008) 21:50:40 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="77fe8b854fbee7e0523e3c04182ec20169ac453e57ba04aa2b4052930640a614df995025bf1e3a95ea1b8fb8c6c74e626671269eeb6bab3a73d2abb391d59bdce8695aaec91142ad25812a508261befa4a79cd3fa8f8adef9fd9ec2e7b3ce7d71edd32c3cd", 0x65, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140), 0x82502, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x40}) (async, rerun: 64) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async, rerun: 64) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0x9, 0x80]) (async) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) 21:50:40 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="77fe8b854fbee7e0523e3c04182ec20169ac453e57ba04aa2b4052930640a614df995025bf1e3a95ea1b8fb8c6c74e626671269eeb6bab3a73d2abb391d59bdce8695aaec91142ad25812a508261befa4a79cd3fa8f8adef9fd9ec2e7b3ce7d71edd32c3cd", 0x65, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140), 0x82502, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x40}) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0x9, 0x80]) (async, rerun: 32) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) (rerun: 32) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000006) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, r1, 0x0], 0x6}) 21:50:40 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) 21:50:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000006) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, r1, 0x0], 0x6}) 21:50:40 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 0: shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) 21:50:40 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) 21:50:40 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) (async) 21:50:40 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000006) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, r1, 0x0], 0x6}) 21:50:40 executing program 0: shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) (async) 21:50:40 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xfffff000, "fa0b47e302f0ef193f702853f901903d1387f0d297b320ab215f48d1997e86b1", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"2a1c89b8e1c89cb7f3520ebc4a23f19ffeaa62cc29b7b5a301e9935a631e2a87"}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001) r1 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x1}) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)="092ad007d4cf3ca9a266787ec117b93f3d29b01f0aa621a68c31bd9ff0a68ec43ce5003f174a429dcfce4390aacf00cd66572389e7065067cace3462f9883d082e53cf7d3153008eb00c3913668564e40d47ef87a571d16497dd3302b8db38de", 0x60, r2}, 0x68) 21:50:40 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) 21:50:40 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 21:50:40 executing program 0: shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) 21:50:40 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xfffff000, "fa0b47e302f0ef193f702853f901903d1387f0d297b320ab215f48d1997e86b1", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"2a1c89b8e1c89cb7f3520ebc4a23f19ffeaa62cc29b7b5a301e9935a631e2a87"}) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001) (async) r1 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x1}) (async) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)="092ad007d4cf3ca9a266787ec117b93f3d29b01f0aa621a68c31bd9ff0a68ec43ce5003f174a429dcfce4390aacf00cd66572389e7065067cace3462f9883d082e53cf7d3153008eb00c3913668564e40d47ef87a571d16497dd3302b8db38de", 0x60, r2}, 0x68) 21:50:40 executing program 3: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) (rerun: 64) 21:50:40 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9003, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x4, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200180, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:40 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000614010025bd70be83839bbfe1061b0001000003"], 0x18}, 0x1, 0x0, 0x0, 0x20081}, 0x10000000) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 21:50:40 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xfffff000, "fa0b47e302f0ef193f702853f901903d1387f0d297b320ab215f48d1997e86b1", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"2a1c89b8e1c89cb7f3520ebc4a23f19ffeaa62cc29b7b5a301e9935a631e2a87"}) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001) r1 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x1}) (async) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)="092ad007d4cf3ca9a266787ec117b93f3d29b01f0aa621a68c31bd9ff0a68ec43ce5003f174a429dcfce4390aacf00cd66572389e7065067cace3462f9883d082e53cf7d3153008eb00c3913668564e40d47ef87a571d16497dd3302b8db38de", 0x60, r2}, 0x68) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9003, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x4, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200180, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9003, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x4, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200180, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) 21:50:40 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000614010025bd70be83839bbfe1061b0001000003"], 0x18}, 0x1, 0x0, 0x0, 0x20081}, 0x10000000) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x30, r0, 0x82000000) 21:50:40 executing program 2: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000614010025bd70be83839bbfe1061b0001000003"], 0x18}, 0x1, 0x0, 0x0, 0x20081}, 0x10000000) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) 21:50:40 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x40, 0x3f, 0x6, 0x1c, 0x0, 0x673, 0x46040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x20}, 0x10020, 0x0, 0x9f97, 0x7, 0xffff, 0x1f, 0x9, 0x0, 0xfffffff8, 0x0, 0x10000}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9003, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x4, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200180, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9003, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x4, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200180, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) 21:50:40 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x101, 0x7f, 0x4}, {0x1, 0xe, 0x7, 0x913}, {0x2764, 0x9, 0x6b, 0x1}, {0x0, 0x3, 0x6, 0x80}, {0x2, 0x1f, 0x5, 0x800}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2}) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000540)={0x20, 0x0, 0x62d, 0x7, 0x7f, 0x803ab}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000440)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x5, 0x5, 0x7, 0x101, 0x7fffffffffffffff], 0x2}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 21:50:40 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000614010025bd70be83839bbfe1061b0001000003"], 0x18}, 0x1, 0x0, 0x0, 0x20081}, 0x10000000) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000614010025bd70be83839bbfe1061b0001000003"], 0x18}, 0x1, 0x0, 0x0, 0x20081}, 0x10000000) (async) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) (async) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x30, r0, 0x82000000) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x40, 0x3f, 0x6, 0x1c, 0x0, 0x673, 0x46040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x20}, 0x10020, 0x0, 0x9f97, 0x7, 0xffff, 0x1f, 0x9, 0x0, 0xfffffff8, 0x0, 0x10000}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) 21:50:40 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x30, r0, 0x82000000) 21:50:40 executing program 0: shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:50:40 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x40, 0x3f, 0x6, 0x1c, 0x0, 0x673, 0x46040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x20}, 0x10020, 0x0, 0x9f97, 0x7, 0xffff, 0x1f, 0x9, 0x0, 0xfffffff8, 0x0, 0x10000}) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:40 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:41 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 21:50:41 executing program 0: shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x4, 0x6, 0x98, 0xff, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x0, 0xfffffdda, 0x7, 0x8, 0x6, 0x96, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x50, r2, 0x9) 21:50:41 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 21:50:41 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x7f, 0x81, 0x2, 0x0, 0x3a12fa49, 0x20, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x200}, 0x4020, 0x10001, 0x2, 0x2, 0xd5, 0x4, 0x46c1, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0xfffffffffffffff9) 21:50:41 executing program 0: shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 21:50:41 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) 21:50:41 executing program 3: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x4, 0x6, 0x98, 0xff, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x0, 0xfffffdda, 0x7, 0x8, 0x6, 0x96, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x50, r2, 0x9) 21:50:41 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x7f, 0x81, 0x2, 0x0, 0x3a12fa49, 0x20, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x200}, 0x4020, 0x10001, 0x2, 0x2, 0xd5, 0x4, 0x46c1, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0xfffffffffffffff9) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x7f, 0x81, 0x2, 0x0, 0x3a12fa49, 0x20, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x200}, 0x4020, 0x10001, 0x2, 0x2, 0xd5, 0x4, 0x46c1, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) (async) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) (async) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0xfffffffffffffff9) (async) 21:50:41 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) [ 1745.596359] audit: type=1326 audit(1651355441.126:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30762 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c24f530e9 code=0x10000 21:50:41 executing program 4: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xff) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x4, 0x6, 0x98, 0xff, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x0, 0xfffffdda, 0x7, 0x8, 0x6, 0x96, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x50, r2, 0x9) 21:50:41 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x7f, 0x81, 0x2, 0x0, 0x3a12fa49, 0x20, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x200}, 0x4020, 0x10001, 0x2, 0x2, 0xd5, 0x4, 0x46c1, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) (async, rerun: 32) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0xfffffffffffffff9) 21:50:41 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) 21:50:41 executing program 4: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xff) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xff) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) 21:50:41 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) [ 1745.684259] audit: type=1326 audit(1651355441.216:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30808 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c24f530e9 code=0x10000 21:50:41 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 32) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) (rerun: 32) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x4, 0x6, 0x98, 0xff, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x1000, 0x0, 0xfffffdda, 0x7, 0x8, 0x6, 0x96, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) [ 1745.784854] audit: type=1326 audit(1651355441.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30830 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x10000 21:50:41 executing program 4: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xff) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xff) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) 21:50:41 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) 21:50:41 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x30200, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/160, &(0x7f00000001c0)=0xa0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0xe) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x1, 0x40, 0x1, 0x80000001}, {0x5, 0x5, 0x3f, 0x2}, {0x5, 0x3, 0x0, 0xfffffffe}, {0x3, 0x40, 0x7f, 0x71d}, {0x8, 0x9, 0x1f, 0x9}, {0xa0, 0x5, 0x0, 0x3}, {0x9, 0x8, 0x1f, 0xfffffff8}, {0x20, 0x4, 0x5, 0x8}]}) 21:50:41 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x2, 0x7, 0x0, 0x7, 0x8, 0x5, 0xfc, 0x1, 0x1, 0xd4, 0xed, 0x2, 0x5}, 0xe) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/45) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) [ 1745.821591] audit: type=1326 audit(1651355441.336:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30832 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c24f530e9 code=0x10000 21:50:41 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140c, 0x300, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) 21:50:41 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x30200, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/160, &(0x7f00000001c0)=0xa0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0xe) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x1, 0x40, 0x1, 0x80000001}, {0x5, 0x5, 0x3f, 0x2}, {0x5, 0x3, 0x0, 0xfffffffe}, {0x3, 0x40, 0x7f, 0x71d}, {0x8, 0x9, 0x1f, 0x9}, {0xa0, 0x5, 0x0, 0x3}, {0x9, 0x8, 0x1f, 0xfffffff8}, {0x20, 0x4, 0x5, 0x8}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x30200, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/160, &(0x7f00000001c0)=0xa0) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0xe) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x1, 0x40, 0x1, 0x80000001}, {0x5, 0x5, 0x3f, 0x2}, {0x5, 0x3, 0x0, 0xfffffffe}, {0x3, 0x40, 0x7f, 0x71d}, {0x8, 0x9, 0x1f, 0x9}, {0xa0, 0x5, 0x0, 0x3}, {0x9, 0x8, 0x1f, 0xfffffff8}, {0x20, 0x4, 0x5, 0x8}]}) (async) 21:50:41 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffb000/0x3000)=nil}) [ 1745.932027] audit: type=1326 audit(1651355441.456:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30864 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x10000 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x2, 0x7, 0x0, 0x7, 0x8, 0x5, 0xfc, 0x1, 0x1, 0xd4, 0xed, 0x2, 0x5}, 0xe) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/45) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x2, 0x7, 0x0, 0x7, 0x8, 0x5, 0xfc, 0x1, 0x1, 0xd4, 0xed, 0x2, 0x5}, 0xe) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/45) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) (async) 21:50:41 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) 21:50:41 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) (async) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140c, 0x300, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) 21:50:41 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x30200, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/160, &(0x7f00000001c0)=0xa0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0xe) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x1, 0x40, 0x1, 0x80000001}, {0x5, 0x5, 0x3f, 0x2}, {0x5, 0x3, 0x0, 0xfffffffe}, {0x3, 0x40, 0x7f, 0x71d}, {0x8, 0x9, 0x1f, 0x9}, {0xa0, 0x5, 0x0, 0x3}, {0x9, 0x8, 0x1f, 0xfffffff8}, {0x20, 0x4, 0x5, 0x8}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x30200, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/160, &(0x7f00000001c0)=0xa0) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0xe) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x1, 0x40, 0x1, 0x80000001}, {0x5, 0x5, 0x3f, 0x2}, {0x5, 0x3, 0x0, 0xfffffffe}, {0x3, 0x40, 0x7f, 0x71d}, {0x8, 0x9, 0x1f, 0x9}, {0xa0, 0x5, 0x0, 0x3}, {0x9, 0x8, 0x1f, 0xfffffff8}, {0x20, 0x4, 0x5, 0x8}]}) (async) 21:50:41 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140c, 0x300, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000111400082bbd7000fcdbdf2508004a0001000000080003000200000008004a0001000000080001000000000008003c0000000000080001000000000008003e00050000000800010002000000ec1e0345b13f129b542840c63c"], 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x20040880) 21:50:41 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x2, 0x7, 0x0, 0x7, 0x8, 0x5, 0xfc, 0x1, 0x1, 0xd4, 0xed, 0x2, 0x5}, 0xe) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/45) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x2, 0x7, 0x0, 0x7, 0x8, 0x5, 0xfc, 0x1, 0x1, 0xd4, 0xed, 0x2, 0x5}, 0xe) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/45) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) (async) [ 1746.039526] audit: type=1326 audit(1651355441.546:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30896 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x10000 21:50:41 executing program 5: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:41 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000914040028bd0f40cab2e07d0685999414f2c07fc7177000ffdbdf250800010001000000080001000200000008000100000000000800010002000000907d3eae616f5f15b4c8715531947759e5c3c32e7b55c8fd7a63fcdfe69d73303535404b4fa0a7bad6f428ee3de4a65ee98b4723e82ec410ea97c48f593b4f"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x1405, 0x100, 0x70bd2d, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x8, 0x6, 0x80, 0x1}]}) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5597, 0x6, 0x97, 0x8}, {0x37f2, 0x3, 0x7, 0x8}]}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x77, 0x34002) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000280)=[0x5, 0x9]) 21:50:41 executing program 5: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) 21:50:41 executing program 4: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:41 executing program 3: userfaultfd(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) [ 1746.158368] audit: type=1326 audit(1651355441.686:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30921 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x10000 21:50:41 executing program 4: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 21:50:41 executing program 5: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:41 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) 21:50:41 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000914040028bd0f40cab2e07d0685999414f2c07fc7177000ffdbdf250800010001000000080001000200000008000100000000000800010002000000907d3eae616f5f15b4c8715531947759e5c3c32e7b55c8fd7a63fcdfe69d73303535404b4fa0a7bad6f428ee3de4a65ee98b4723e82ec410ea97c48f593b4f"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x1405, 0x100, 0x70bd2d, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000001) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x8, 0x6, 0x80, 0x1}]}) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5597, 0x6, 0x97, 0x8}, {0x37f2, 0x3, 0x7, 0x8}]}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x77, 0x34002) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000280)=[0x5, 0x9]) 21:50:41 executing program 4: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 21:50:41 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x82000000) 21:50:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8e1d80048b127c3d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x39, 0xa9, @random="81175ada8860e34bc6939e038925e171e384007f9e2d23473b1dba9f1fb197443347c4335a85843bdd988898aa7c48d7fe5832b334"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc0081}, 0x20004000) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040881) 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 21:50:41 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000914040028bd0f40cab2e07d0685999414f2c07fc7177000ffdbdf250800010001000000080001000200000008000100000000000800010002000000907d3eae616f5f15b4c8715531947759e5c3c32e7b55c8fd7a63fcdfe69d73303535404b4fa0a7bad6f428ee3de4a65ee98b4723e82ec410ea97c48f593b4f"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x1405, 0x100, 0x70bd2d, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x8, 0x6, 0x80, 0x1}]}) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5597, 0x6, 0x97, 0x8}, {0x37f2, 0x3, 0x7, 0x8}]}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x77, 0x34002) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000280)=[0x5, 0x9]) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000914040028bd0f40cab2e07d0685999414f2c07fc7177000ffdbdf250800010001000000080001000200000008000100000000000800010002000000907d3eae616f5f15b4c8715531947759e5c3c32e7b55c8fd7a63fcdfe69d73303535404b4fa0a7bad6f428ee3de4a65ee98b4723e82ec410ea97c48f593b4f"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x1405, 0x100, 0x70bd2d, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000001) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x8, 0x6, 0x80, 0x1}]}) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/33) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5597, 0x6, 0x97, 0x8}, {0x37f2, 0x3, 0x7, 0x8}]}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x77, 0x34002) (async) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000280)=[0x5, 0x9]) (async) 21:50:41 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x5, 0x6, 0x10000}]}) 21:50:41 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 1746.344740] audit: type=1326 audit(1651355441.876:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x10000 21:50:41 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:41 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8e1d80048b127c3d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x39, 0xa9, @random="81175ada8860e34bc6939e038925e171e384007f9e2d23473b1dba9f1fb197443347c4335a85843bdd988898aa7c48d7fe5832b334"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc0081}, 0x20004000) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040881) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8e1d80048b127c3d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x39, 0xa9, @random="81175ada8860e34bc6939e038925e171e384007f9e2d23473b1dba9f1fb197443347c4335a85843bdd988898aa7c48d7fe5832b334"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc0081}, 0x20004000) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040881) (async) 21:50:41 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x82000000) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 1746.429350] audit: type=1326 audit(1651355441.956:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30993 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x10000 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x82000000) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r1, 0x7}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2030b200048902012cbd7000fddbdf250800010000004e5f1bbfbf2461b50000"], 0x20}, 0x1, 0x0, 0x0, 0x10000880}, 0x20000000) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8e1d80048b127c3d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x39, 0xa9, @random="81175ada8860e34bc6939e038925e171e384007f9e2d23473b1dba9f1fb197443347c4335a85843bdd988898aa7c48d7fe5832b334"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc0081}, 0x20004000) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040881) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 5: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:42 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r1, 0x7}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2030b200048902012cbd7000fddbdf250800010000004e5f1bbfbf2461b50000"], 0x20}, 0x1, 0x0, 0x0, 0x10000880}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r1, 0x7}) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2030b200048902012cbd7000fddbdf250800010000004e5f1bbfbf2461b50000"], 0x20}, 0x1, 0x0, 0x0, 0x10000880}, 0x20000000) (async) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) (rerun: 64) 21:50:42 executing program 0: shmget$private(0x0, 0x1000, 0x54000002, &(0x7f0000ffd000/0x1000)=nil) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 5: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:42 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r1, 0x7}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2030b200048902012cbd7000fddbdf250800010000004e5f1bbfbf2461b50000"], 0x20}, 0x1, 0x0, 0x0, 0x10000880}, 0x20000000) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) 21:50:42 executing program 0: shmget$private(0x0, 0x1000, 0x54000002, &(0x7f0000ffd000/0x1000)=nil) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2001}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) 21:50:42 executing program 5: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) recvmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000180)=""/25, 0x19}], 0x2, &(0x7f0000000280)=""/201, 0xc9}, 0x102) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x8c802, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0xfffffffffffffffd) 21:50:42 executing program 0: shmget$private(0x0, 0x1000, 0x54000002, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x54000002, &(0x7f0000ffd000/0x1000)=nil) (async) 21:50:42 executing program 2: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180)="a191ee48246a7a2551a90b23e38dd9e679abd7f985542e6c6a5153766ac4b69ca10ccca884fd70aee6f60a98fa76109ca6958db0f3ca092adf86f93a417ed12565208ff88091dd5ac124c3ab5216b15541c3e72469ed312075a27c2efdfbbd9373b781191384915bab652582a9589d0fe22c037977c6fa90e4", 0x79, r0}, 0x68) pselect6(0x40, &(0x7f0000000000)={0x800, 0x4, 0x800, 0x2, 0x3, 0x6, 0x5, 0x4}, &(0x7f0000000040)={0xff, 0x7, 0x0, 0x6, 0x7ff, 0xb1, 0x2, 0xfffffffffffffff8}, &(0x7f0000000080)={0x1, 0x7ff, 0x3251, 0x4, 0x3, 0x7, 0x3, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x800]}, 0x8}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget(0x1, 0x4000, 0x100, &(0x7f00006da000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x1000)=nil) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) (async) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) 21:50:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) recvmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000180)=""/25, 0x19}], 0x2, &(0x7f0000000280)=""/201, 0xc9}, 0x102) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x8c802, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) recvmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000180)=""/25, 0x19}], 0x2, &(0x7f0000000280)=""/201, 0xc9}, 0x102) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x8c802, 0x0) (async) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0xfffffffffffffffd) (async) 21:50:42 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b0, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) 21:50:42 executing program 2: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180)="a191ee48246a7a2551a90b23e38dd9e679abd7f985542e6c6a5153766ac4b69ca10ccca884fd70aee6f60a98fa76109ca6958db0f3ca092adf86f93a417ed12565208ff88091dd5ac124c3ab5216b15541c3e72469ed312075a27c2efdfbbd9373b781191384915bab652582a9589d0fe22c037977c6fa90e4", 0x79, r0}, 0x68) (async) pselect6(0x40, &(0x7f0000000000)={0x800, 0x4, 0x800, 0x2, 0x3, 0x6, 0x5, 0x4}, &(0x7f0000000040)={0xff, 0x7, 0x0, 0x6, 0x7ff, 0xb1, 0x2, 0xfffffffffffffff8}, &(0x7f0000000080)={0x1, 0x7ff, 0x3251, 0x4, 0x3, 0x7, 0x3, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x800]}, 0x8}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) shmget(0x1, 0x4000, 0x100, &(0x7f00006da000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x1000)=nil) 21:50:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) recvmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000180)=""/25, 0x19}], 0x2, &(0x7f0000000280)=""/201, 0xc9}, 0x102) (async, rerun: 32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x8c802, 0x0) (rerun: 32) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0xfffffffffffffffd) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}]}) 21:50:42 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b0, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) (async) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) (rerun: 32) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) 21:50:42 executing program 2: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180)="a191ee48246a7a2551a90b23e38dd9e679abd7f985542e6c6a5153766ac4b69ca10ccca884fd70aee6f60a98fa76109ca6958db0f3ca092adf86f93a417ed12565208ff88091dd5ac124c3ab5216b15541c3e72469ed312075a27c2efdfbbd9373b781191384915bab652582a9589d0fe22c037977c6fa90e4", 0x79, r0}, 0x68) (async) pselect6(0x40, &(0x7f0000000000)={0x800, 0x4, 0x800, 0x2, 0x3, 0x6, 0x5, 0x4}, &(0x7f0000000040)={0xff, 0x7, 0x0, 0x6, 0x7ff, 0xb1, 0x2, 0xfffffffffffffff8}, &(0x7f0000000080)={0x1, 0x7ff, 0x3251, 0x4, 0x3, 0x7, 0x3, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x800]}, 0x8}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget(0x1, 0x4000, 0x100, &(0x7f00006da000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x1000)=nil) 21:50:42 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b0, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) (async) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}]}) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) socket$vsock_dgram(0x28, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xb, 0x20010, 0xffffffffffffffff, 0x0) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0xfff, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, @in6={0xa, 0x4, 0x3f, @empty, 0x2d}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}], 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) (async) socket$vsock_dgram(0x28, 0x2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xb, 0x20010, 0xffffffffffffffff, 0x0) 21:50:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) 21:50:42 executing program 0: userfaultfd(0x1) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x548, &(0x7f0000fff000/0x1000)=nil) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) 21:50:42 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0xfff, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, @in6={0xa, 0x4, 0x3f, @empty, 0x2d}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}], 0x84) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}]}) 21:50:42 executing program 0: userfaultfd(0x1) (async, rerun: 32) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 32) shmget$private(0x0, 0x1000, 0x548, &(0x7f0000fff000/0x1000)=nil) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) (async) socket$vsock_dgram(0x28, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xb, 0x20010, 0xffffffffffffffff, 0x0) 21:50:42 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0xfff, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, @in6={0xa, 0x4, 0x3f, @empty, 0x2d}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}], 0x84) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:50:42 executing program 0: userfaultfd(0x1) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x548, &(0x7f0000fff000/0x1000)=nil) userfaultfd(0x1) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x1000, 0x548, &(0x7f0000fff000/0x1000)=nil) (async) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x5, 0x6, 0x10000}]}) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 5: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x5, 0x6, 0x10000}]}) 21:50:42 executing program 0: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x280201, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4530}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xd8}}, 0x8001) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) 21:50:42 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x7ff, 0x5, 0x4, 0x2}, {0x9, 0x3, 0x1, 0x7}, {0x1, 0x5d, 0x9d, 0xfffffffc}, {0x2, 0x2, 0x18, 0xfffffffd}, {0x1d, 0x20, 0x12, 0x1000}, {0xffc0, 0x7, 0x3, 0x79a5}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0xa0c6, 0x81}) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a) 21:50:42 executing program 5: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x7ff, 0x5, 0x4, 0x2}, {0x9, 0x3, 0x1, 0x7}, {0x1, 0x5d, 0x9d, 0xfffffffc}, {0x2, 0x2, 0x18, 0xfffffffd}, {0x1d, 0x20, 0x12, 0x1000}, {0xffc0, 0x7, 0x3, 0x79a5}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0xa0c6, 0x81}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x7ff, 0x5, 0x4, 0x2}, {0x9, 0x3, 0x1, 0x7}, {0x1, 0x5d, 0x9d, 0xfffffffc}, {0x2, 0x2, 0x18, 0xfffffffd}, {0x1d, 0x20, 0x12, 0x1000}, {0xffc0, 0x7, 0x3, 0x79a5}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0xa0c6, 0x81}) (async) 21:50:42 executing program 0: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x280201, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4530}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xd8}}, 0x8001) (async) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) (async, rerun: 32) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) (rerun: 32) 21:50:42 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a) 21:50:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x5, 0x6, 0x10000}]}) 21:50:42 executing program 5: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 21:50:42 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:42 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x7ff, 0x5, 0x4, 0x2}, {0x9, 0x3, 0x1, 0x7}, {0x1, 0x5d, 0x9d, 0xfffffffc}, {0x2, 0x2, 0x18, 0xfffffffd}, {0x1d, 0x20, 0x12, 0x1000}, {0xffc0, 0x7, 0x3, 0x79a5}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0xa0c6, 0x81}) 21:50:42 executing program 0: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (rerun: 32) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x280201, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4530}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xd8}}, 0x8001) (async) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) (async, rerun: 32) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) (rerun: 32) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x6, 0x10000}]}) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x23b80000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xfc, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x1403, 0x2, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x40090) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:43 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="e56a02658437de886460b12fa36353d2e8f7c0950a1104ab5d4475f261d4bfdf41493e0af76b456d5149b1de048cbeaa6b82eae612ce41af5f2ed73c851b4548591f40a7809d03ccc6a1c6c8def12aaecd9559ed002f534e3c0d037cd13301e22b5aa549f3549f0700000000000000cd9001d3579bb48223ad8dcd17ab773fd69d3577fa52b6d909e44243c4dc696cfe01504afe3dc96a748657d1", 0x9b, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000280)=""/81, 0x51, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1411, 0x5408c17daad8cd2d, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4008814) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1}, &(0x7f0000000040)=""/18, 0x12, &(0x7f00000000c0)={&(0x7f0000000080)={'ghash-ce\x00'}}) 21:50:43 executing program 1: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x10000}]}) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 1747.536884] audit: type=1326 audit(1651355443.066:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31250 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x10000 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x23b80000000) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xfc, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44}, 0x84) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x1403, 0x2, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x40090) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:43 executing program 2: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x23b80000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xfc, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x1403, 0x2, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x40090) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:43 executing program 1: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x23b80000000) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xfc, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44}, 0x84) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x1403, 0x2, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x40090) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="e56a02658437de886460b12fa36353d2e8f7c0950a1104ab5d4475f261d4bfdf41493e0af76b456d5149b1de048cbeaa6b82eae612ce41af5f2ed73c851b4548591f40a7809d03ccc6a1c6c8def12aaecd9559ed002f534e3c0d037cd13301e22b5aa549f3549f0700000000000000cd9001d3579bb48223ad8dcd17ab773fd69d3577fa52b6d909e44243c4dc696cfe01504afe3dc96a748657d1", 0x9b, 0xfffffffffffffff9) (async) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000280)=""/81, 0x51, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1411, 0x5408c17daad8cd2d, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4008814) (async) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1}, &(0x7f0000000040)=""/18, 0x12, &(0x7f00000000c0)={&(0x7f0000000080)={'ghash-ce\x00'}}) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x280201, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4530}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xd8}}, 0x8001) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x80, 0x1405, 0x100, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x3}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x51) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140f, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a000}, 0x20048000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil}) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6}]}) [ 1747.664228] could not allocate digest TFM handle ghash-ce 21:50:43 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x80, 0x1405, 0x100, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x3}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x51) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140f, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a000}, 0x20048000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x80, 0x1405, 0x100, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x3}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x51) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140f, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a000}, 0x20048000) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil}) (async) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x280201, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4530}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xd8}}, 0x8001) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) 21:50:43 executing program 1: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:43 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (rerun: 32) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x6}]}) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x280201, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4530}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xd8}}, 0x8001) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="e56a02658437de886460b12fa36353d2e8f7c0950a1104ab5d4475f261d4bfdf41493e0af76b456d5149b1de048cbeaa6b82eae612ce41af5f2ed73c851b4548591f40a7809d03ccc6a1c6c8def12aaecd9559ed002f534e3c0d037cd13301e22b5aa549f3549f0700000000000000cd9001d3579bb48223ad8dcd17ab773fd69d3577fa52b6d909e44243c4dc696cfe01504afe3dc96a748657d1", 0x9b, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000280)=""/81, 0x51, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1411, 0x5408c17daad8cd2d, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4008814) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1}, &(0x7f0000000040)=""/18, 0x12, &(0x7f00000000c0)={&(0x7f0000000080)={'ghash-ce\x00'}}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="e56a02658437de886460b12fa36353d2e8f7c0950a1104ab5d4475f261d4bfdf41493e0af76b456d5149b1de048cbeaa6b82eae612ce41af5f2ed73c851b4548591f40a7809d03ccc6a1c6c8def12aaecd9559ed002f534e3c0d037cd13301e22b5aa549f3549f0700000000000000cd9001d3579bb48223ad8dcd17ab773fd69d3577fa52b6d909e44243c4dc696cfe01504afe3dc96a748657d1", 0x9b, 0xfffffffffffffff9) (async) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d2f2", 0x2, 0xfffffffffffffffe) (async) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000280)=""/81, 0x51, &(0x7f0000000340)={&(0x7f0000000300)={'rmd128\x00'}}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1411, 0x5408c17daad8cd2d, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4008814) (async) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1}, &(0x7f0000000040)=""/18, 0x12, &(0x7f00000000c0)={&(0x7f0000000080)={'ghash-ce\x00'}}) (async) 21:50:43 executing program 1: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x3, 0x6}, {0x800, 0x0, 0x0, 0x75a}, {0x6, 0x3, 0x8, 0x5}]}) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x280201, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4530}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xd8}}, 0x8001) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) [ 1747.817815] could not allocate digest TFM handle ghash-ce 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x80, 0x1405, 0x100, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x3}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x51) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140f, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a000}, 0x20048000) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil}) 21:50:43 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x6}]}) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f4, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdb67}, {0x6, 0x11, 0x48da}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc15}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa387}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4001) 21:50:43 executing program 1: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x3, 0x6}, {0x800, 0x0, 0x0, 0x75a}, {0x6, 0x3, 0x8, 0x5}]}) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x280201, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) [ 1747.901380] could not allocate digest TFM handle ghash-ce 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x6}]}) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007) (async) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f4, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdb67}, {0x6, 0x11, 0x48da}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc15}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa387}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4001) 21:50:43 executing program 1: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x3, 0x6}, {0x800, 0x0, 0x0, 0x75a}, {0x6, 0x3, 0x8, 0x5}]}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x3, 0x6}, {0x800, 0x0, 0x0, 0x75a}, {0x6, 0x3, 0x8, 0x5}]}) (async) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c) (async) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c) 21:50:43 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140f, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x4040010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0xff, 0x80, 0x1f, 0x3}]}) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {}, {0x6}]}) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f4, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdb67}, {0x6, 0x11, 0x48da}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc15}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa387}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4001) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f4, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdb67}, {0x6, 0x11, 0x48da}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc15}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa387}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4001) (async) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x200000d, 0x50, 0xffffffffffffffff, 0x82000000) 21:50:43 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140f, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x4040010) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0xff, 0x80, 0x1f, 0x3}]}) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x401, 0x903eb738a8310fa8) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x5, 0x1010, r0, 0x82000000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0xa, &(0x7f0000000080)=[{0xace, 0xff, 0x6, 0x7}, {0x0, 0x6, 0x1f, 0x1}, {0x2, 0x53, 0xca, 0x8}, {0x4, 0x1, 0x80, 0x3ac}, {0x4, 0x5f, 0x2, 0x1f}, {0x8001, 0xff, 0x5, 0x3f}, {0x8, 0xf8, 0x6, 0x1}, {0x3, 0x3, 0x2, 0x7}, {0x67, 0x46, 0x4, 0x7}, {0x7, 0xfe, 0x3, 0x800003}]}) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/242) shmget(0x3, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) 21:50:43 executing program 2: mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0xa, &(0x7f0000000080)=[{0xace, 0xff, 0x6, 0x7}, {0x0, 0x6, 0x1f, 0x1}, {0x2, 0x53, 0xca, 0x8}, {0x4, 0x1, 0x80, 0x3ac}, {0x4, 0x5f, 0x2, 0x1f}, {0x8001, 0xff, 0x5, 0x3f}, {0x8, 0xf8, 0x6, 0x1}, {0x3, 0x3, 0x2, 0x7}, {0x67, 0x46, 0x4, 0x7}, {0x7, 0xfe, 0x3, 0x800003}]}) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/242) shmget(0x3, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) 21:50:43 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140f, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x4040010) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0xff, 0x80, 0x1f, 0x3}]}) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x200000d, 0x50, 0xffffffffffffffff, 0x82000000) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x401, 0x903eb738a8310fa8) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x5, 0x1010, r0, 0x82000000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:43 executing program 2: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000e140120b901cd03b879885e8940acd8002dbd70"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x200000d, 0x50, 0xffffffffffffffff, 0x82000000) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0xa, &(0x7f0000000080)=[{0xace, 0xff, 0x6, 0x7}, {0x0, 0x6, 0x1f, 0x1}, {0x2, 0x53, 0xca, 0x8}, {0x4, 0x1, 0x80, 0x3ac}, {0x4, 0x5f, 0x2, 0x1f}, {0x8001, 0xff, 0x5, 0x3f}, {0x8, 0xf8, 0x6, 0x1}, {0x3, 0x3, 0x2, 0x7}, {0x67, 0x46, 0x4, 0x7}, {0x7, 0xfe, 0x3, 0x800003}]}) (async) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/242) (async) shmget(0x3, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) 21:50:43 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 21:50:43 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x401, 0x903eb738a8310fa8) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x5, 0x1010, r0, 0x82000000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x401, 0x903eb738a8310fa8) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x5, 0x1010, r0, 0x82000000) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x428f) 21:50:43 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) 21:50:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 21:50:43 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x1ff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:43 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eb3192f14a08786fe8eb54c5dfcf36973447416c61126da2444b605220961138", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) 21:50:43 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x428f) 21:50:44 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) (async) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 21:50:44 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x81}, {}, {0x6}]}) 21:50:44 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eb3192f14a08786fe8eb54c5dfcf36973447416c61126da2444b605220961138", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eb3192f14a08786fe8eb54c5dfcf36973447416c61126da2444b605220961138"}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) (async) 21:50:44 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x428f) 21:50:44 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) (async) 21:50:44 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x0, 0x8, 0x292a}, {{}, 0x15, 0x81, 0x2}, {{}, 0x16, 0x2005, 0xa1}, {{0x0, 0x2710}, 0x3, 0x2, 0x7}, {{r2, r3/1000+10000}, 0x0, 0xfff7, 0x4}, {{0x0, 0x2710}, 0x2, 0x7e, 0x9}, {{r0, r1/1000+10000}, 0x14, 0xfe6c, 0x8}, {{0x77359400}, 0x12, 0x400, 0x40}], 0xc0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000027c0)=""/97) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000140)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/22, 0x16}, {&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8, &(0x7f0000001780)=""/4096, 0x1000}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002880), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000028c0)=""/77) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:44 executing program 0: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/137, &(0x7f00000000c0)=0x89) 21:50:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x81}, {}, {0x6}]}) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 21:50:44 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eb3192f14a08786fe8eb54c5dfcf36973447416c61126da2444b605220961138", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"eb3192f14a08786fe8eb54c5dfcf36973447416c61126da2444b605220961138"}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) (async) 21:50:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, r3, 0x2, 0x1000, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000804) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:44 executing program 0: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/137, &(0x7f00000000c0)=0x89) 21:50:44 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x0, 0x8, 0x292a}, {{}, 0x15, 0x81, 0x2}, {{}, 0x16, 0x2005, 0xa1}, {{0x0, 0x2710}, 0x3, 0x2, 0x7}, {{r2, r3/1000+10000}, 0x0, 0xfff7, 0x4}, {{0x0, 0x2710}, 0x2, 0x7e, 0x9}, {{r0, r1/1000+10000}, 0x14, 0xfe6c, 0x8}, {{0x77359400}, 0x12, 0x400, 0x40}], 0xc0) (async) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000027c0)=""/97) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000140)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/22, 0x16}, {&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8, &(0x7f0000001780)=""/4096, 0x1000}, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002880), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000028c0)=""/77) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x81}, {}, {0x6}]}) 21:50:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, r3, 0x2, 0x1000, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000804) (async, rerun: 32) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:44 executing program 0: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/137, &(0x7f00000000c0)=0x89) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/137, &(0x7f00000000c0)=0x89) (async) 21:50:44 executing program 4: write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) 21:50:44 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x0, 0x8, 0x292a}, {{}, 0x15, 0x81, 0x2}, {{}, 0x16, 0x2005, 0xa1}, {{0x0, 0x2710}, 0x3, 0x2, 0x7}, {{r2, r3/1000+10000}, 0x0, 0xfff7, 0x4}, {{0x0, 0x2710}, 0x2, 0x7e, 0x9}, {{r0, r1/1000+10000}, 0x14, 0xfe6c, 0x8}, {{0x77359400}, 0x12, 0x400, 0x40}], 0xc0) (async, rerun: 32) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000027c0)=""/97) (rerun: 32) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000140)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/22, 0x16}, {&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8, &(0x7f0000001780)=""/4096, 0x1000}, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002880), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000028c0)=""/77) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:44 executing program 0: capget(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x5a001bd3, 0x3, 0x1c, 0x3, 0xcd45, 0x2db5f462}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) 21:50:44 executing program 4: write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x5}, {}, {0x6}]}) 21:50:44 executing program 0: capget(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x5a001bd3, 0x3, 0x1c, 0x3, 0xcd45, 0x2db5f462}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) capget(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x5a001bd3, 0x3, 0x1c, 0x3, 0xcd45, 0x2db5f462}) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) (async) 21:50:44 executing program 4: write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil}) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:44 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x88400, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x80000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x26f5}, {0x0, 0x80, 0x8}]}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000084) 21:50:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, r3, 0x2, 0x1000, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000804) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:44 executing program 0: capget(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x5a001bd3, 0x3, 0x1c, 0x3, 0xcd45, 0x2db5f462}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) 21:50:44 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x88400, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x80000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x26f5}, {0x0, 0x80, 0x8}]}) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000084) 21:50:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, r3, 0x2, 0x1000, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000804) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:44 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 21:50:44 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x88400, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x80000000}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x26f5}, {0x0, 0x80, 0x8}]}) (rerun: 32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000084) 21:50:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x6}]}) 21:50:44 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 21:50:44 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x90902, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:44 executing program 0: shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:44 executing program 1: mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x6}]}) 21:50:44 executing program 0: shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) 21:50:44 executing program 1: mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x80) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:44 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async, rerun: 64) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (rerun: 64) 21:50:44 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x90902, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:44 executing program 0: shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) 21:50:44 executing program 1: mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x80) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:44 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x26000015}, 0x80) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) 21:50:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{}]}) 21:50:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {0x6}]}) 21:50:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffff23eb, 0x644dc28d9c55290a) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x1, 0xf5, &(0x7f0000000040)="cba621de1b972dd930fadd62cfeb25b5945395af0a9f46de4a8d6b8a1f3623774bb09d0a3d8a3234b5561d7836af3f1564c410b7b3cc7b479f46cf7f0063af8c1b40b1c6af14f1218c09514d646451754ac20408aa298482ac03b23a7c2a357bdf69d6930db4eb13283a4c46dedf7f90bf63ff69c5a05cb4b2320c503560f2ba04feb4a144a8e83b7cb48f143b30ccfff41c9fb53d97e7676e3e838ce694e290f49c44271f8ba8bf4c974e001d1188f6e39148ff4f285f9d8900f6f9a8bb2107a7f5fd02a4669308417ac3b43b1145e01ea9b1c86896a39a4c098c0d4c00825340c0792962d7a7a12653b47f87074d46eb393c217c"}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:44 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x26000015}, 0x80) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x26000015}, 0x80) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) (async) 21:50:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdff745000000080001007063690011000200303030303a30303a31302e3000000008008e0003000000080001007063690011000200aee0ca953a30303a3130a1abb5ffba2e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080300000300000000", @ANYRES32=r0], 0x84}, 0x1, 0x0, 0x0, 0x20004060}, 0x40) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x6}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x6, &(0x7f0000000080)=[{0x5}, {}, {0x57, 0x9, 0x8, 0x2}, {0x2, 0x9, 0x24, 0x9}, {0x2, 0x7, 0x3f, 0xfff}, {0x6, 0x6, 0xff, 0x3}]}) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{}]}) 21:50:45 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x90902, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffff23eb, 0x644dc28d9c55290a) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x1, 0xf5, &(0x7f0000000040)="cba621de1b972dd930fadd62cfeb25b5945395af0a9f46de4a8d6b8a1f3623774bb09d0a3d8a3234b5561d7836af3f1564c410b7b3cc7b479f46cf7f0063af8c1b40b1c6af14f1218c09514d646451754ac20408aa298482ac03b23a7c2a357bdf69d6930db4eb13283a4c46dedf7f90bf63ff69c5a05cb4b2320c503560f2ba04feb4a144a8e83b7cb48f143b30ccfff41c9fb53d97e7676e3e838ce694e290f49c44271f8ba8bf4c974e001d1188f6e39148ff4f285f9d8900f6f9a8bb2107a7f5fd02a4669308417ac3b43b1145e01ea9b1c86896a39a4c098c0d4c00825340c0792962d7a7a12653b47f87074d46eb393c217c"}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffff23eb, 0x644dc28d9c55290a) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x1, 0xf5, &(0x7f0000000040)="cba621de1b972dd930fadd62cfeb25b5945395af0a9f46de4a8d6b8a1f3623774bb09d0a3d8a3234b5561d7836af3f1564c410b7b3cc7b479f46cf7f0063af8c1b40b1c6af14f1218c09514d646451754ac20408aa298482ac03b23a7c2a357bdf69d6930db4eb13283a4c46dedf7f90bf63ff69c5a05cb4b2320c503560f2ba04feb4a144a8e83b7cb48f143b30ccfff41c9fb53d97e7676e3e838ce694e290f49c44271f8ba8bf4c974e001d1188f6e39148ff4f285f9d8900f6f9a8bb2107a7f5fd02a4669308417ac3b43b1145e01ea9b1c86896a39a4c098c0d4c00825340c0792962d7a7a12653b47f87074d46eb393c217c"}) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) 21:50:45 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x26000015}, 0x80) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) 21:50:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="472ac5639e60369f2e276eca6af9078fe5eab90917d02160d277036fde601ec5647fdf7e30ad69e99bf91fb23b609772edd4f6c6d06e5f4c76624f894b49fae8c0afb342e554f8a55a9bf05dc9c549494b617e92e9eeee26bf803ae5db4432a1069c7836e3921ccaf83bba3ae8edefbaf1d5e47c1519192d866640296d07ab83da28cc6f408c85bf5fe85387542c8bfccd199c4d8cc62f81b5ca378a81a7621d92382745fee23c343c86790183cd5dce5b31fec12d57f770bc7318cd1f96df466ede00000000000000000000911a5f14bcefa41298a1bda962718614f28144489c20e3b356f6b6242fe0dbb793668ba41ca6d8b4dba35dd57c8290c759404621ad40e9da9aaece96b2991faef6f146b4a51c015387aef5f5de0b3ee22e38a0fe6de64a2905a69212494b1258d7a227448d321c1c5dc52d23e0a1f9057cc4b734de35f3bcc87bb518653e34d7be103222a9e858d9b45a37fce57b10a6ca4431a68a15c056b0dde1d4e453ef78e8e809d0270a33f776f991bbd0be7e5df6e0678b212d2b9ce0bd6bd7e7de38db294e9a52265d62b474774f2179beeaadd166838518bc0acb61e337e181c4b0dc948da553b18bab2dc1b0a942", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdff745000000080001007063690011000200303030303a30303a31302e3000000008008e0003000000080001007063690011000200aee0ca953a30303a3130a1abb5ffba2e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080300000300000000", @ANYRES32=r0], 0x84}, 0x1, 0x0, 0x0, 0x20004060}, 0x40) (async) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x6}) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x6, &(0x7f0000000080)=[{0x5}, {}, {0x57, 0x9, 0x8, 0x2}, {0x2, 0x9, 0x24, 0x9}, {0x2, 0x7, 0x3f, 0xfff}, {0x6, 0x6, 0xff, 0x3}]}) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{}]}) 21:50:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffff23eb, 0x644dc28d9c55290a) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x1, 0xf5, &(0x7f0000000040)="cba621de1b972dd930fadd62cfeb25b5945395af0a9f46de4a8d6b8a1f3623774bb09d0a3d8a3234b5561d7836af3f1564c410b7b3cc7b479f46cf7f0063af8c1b40b1c6af14f1218c09514d646451754ac20408aa298482ac03b23a7c2a357bdf69d6930db4eb13283a4c46dedf7f90bf63ff69c5a05cb4b2320c503560f2ba04feb4a144a8e83b7cb48f143b30ccfff41c9fb53d97e7676e3e838ce694e290f49c44271f8ba8bf4c974e001d1188f6e39148ff4f285f9d8900f6f9a8bb2107a7f5fd02a4669308417ac3b43b1145e01ea9b1c86896a39a4c098c0d4c00825340c0792962d7a7a12653b47f87074d46eb393c217c"}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffff23eb, 0x644dc28d9c55290a) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x1, 0xf5, &(0x7f0000000040)="cba621de1b972dd930fadd62cfeb25b5945395af0a9f46de4a8d6b8a1f3623774bb09d0a3d8a3234b5561d7836af3f1564c410b7b3cc7b479f46cf7f0063af8c1b40b1c6af14f1218c09514d646451754ac20408aa298482ac03b23a7c2a357bdf69d6930db4eb13283a4c46dedf7f90bf63ff69c5a05cb4b2320c503560f2ba04feb4a144a8e83b7cb48f143b30ccfff41c9fb53d97e7676e3e838ce694e290f49c44271f8ba8bf4c974e001d1188f6e39148ff4f285f9d8900f6f9a8bb2107a7f5fd02a4669308417ac3b43b1145e01ea9b1c86896a39a4c098c0d4c00825340c0792962d7a7a12653b47f87074d46eb393c217c"}) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420002, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/37) 21:50:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async, rerun: 64) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdff745000000080001007063690011000200303030303a30303a31302e3000000008008e0003000000080001007063690011000200aee0ca953a30303a3130a1abb5ffba2e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080300000300000000", @ANYRES32=r0], 0x84}, 0x1, 0x0, 0x0, 0x20004060}, 0x40) (async, rerun: 64) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x6}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x6, &(0x7f0000000080)=[{0x5}, {}, {0x57, 0x9, 0x8, 0x2}, {0x2, 0x9, 0x24, 0x9}, {0x2, 0x7, 0x3f, 0xfff}, {0x6, 0x6, 0xff, 0x3}]}) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {}]}) 21:50:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) getsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:45 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420002, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/37) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) userfaultfd(0x80000) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420002, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x2000)=nil) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/37) (async) 21:50:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="4cbbe559bf2a2f0b2f3c331560bff2ec8e5809a21c28a82064cf1bf20b288edf53799bde63ff2ddb9c1bb0773dc36d644ecd06dce280ceb31007a8db24d58f5b12824e3c8b7e079b4431be7d20cb6cc0611870a6ae16", 0xff01, r0}, 0x68) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = gettid() r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x5, 0x1) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000340)=""/12) r4 = epoll_create1(0x0) r5 = memfd_create(&(0x7f0000000100)=']*[i\x00', 0x4) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x6, 0xb6b, 0x1f, 0x10001, 0x2, 0x8}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x5, 0xab, &(0x7f0000000200)="eee8eca61955d9cd55866ca11c1474f8586975c8303207069ad67104dcd960887d21ac8e7e9fd3c48351928e39a38bd0bedaf59c5c1db52ef231ee889987df5170dbde98fa853168fe86bfa3d3cd5546d0ec2290dfbd272c2fcd046e33937b96f40627ce3313e38bf16df3df96dc18019e1db7dbc7da10decc888c8edfd9ff3e97e42ea461d4ee6cb65ea00408c027cba465ca2add4f413b85b02116e0dcad372c88d069b24822917083d1"}) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r4, r5, 0x3}) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {}]}) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 21:50:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) getsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {}]}) 21:50:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="4cbbe559bf2a2f0b2f3c331560bff2ec8e5809a21c28a82064cf1bf20b288edf53799bde63ff2ddb9c1bb0773dc36d644ecd06dce280ceb31007a8db24d58f5b12824e3c8b7e079b4431be7d20cb6cc0611870a6ae16", 0xff01, r0}, 0x68) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = gettid() r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x5, 0x1) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000340)=""/12) r4 = epoll_create1(0x0) r5 = memfd_create(&(0x7f0000000100)=']*[i\x00', 0x4) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x6, 0xb6b, 0x1f, 0x10001, 0x2, 0x8}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x5, 0xab, &(0x7f0000000200)="eee8eca61955d9cd55866ca11c1474f8586975c8303207069ad67104dcd960887d21ac8e7e9fd3c48351928e39a38bd0bedaf59c5c1db52ef231ee889987df5170dbde98fa853168fe86bfa3d3cd5546d0ec2290dfbd272c2fcd046e33937b96f40627ce3313e38bf16df3df96dc18019e1db7dbc7da10decc888c8edfd9ff3e97e42ea461d4ee6cb65ea00408c027cba465ca2add4f413b85b02116e0dcad372c88d069b24822917083d1"}) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r4, r5, 0x3}) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="4cbbe559bf2a2f0b2f3c331560bff2ec8e5809a21c28a82064cf1bf20b288edf53799bde63ff2ddb9c1bb0773dc36d644ecd06dce280ceb31007a8db24d58f5b12824e3c8b7e079b4431be7d20cb6cc0611870a6ae16", 0xff01, r0}, 0x68) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) gettid() (async) syz_open_dev$evdev(&(0x7f0000000300), 0x5, 0x1) (async) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000340)=""/12) (async) epoll_create1(0x0) (async) memfd_create(&(0x7f0000000100)=']*[i\x00', 0x4) (async) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x6, 0xb6b, 0x1f, 0x10001, 0x2, 0x8}) (async) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x5, 0xab, &(0x7f0000000200)="eee8eca61955d9cd55866ca11c1474f8586975c8303207069ad67104dcd960887d21ac8e7e9fd3c48351928e39a38bd0bedaf59c5c1db52ef231ee889987df5170dbde98fa853168fe86bfa3d3cd5546d0ec2290dfbd272c2fcd046e33937b96f40627ce3313e38bf16df3df96dc18019e1db7dbc7da10decc888c8edfd9ff3e97e42ea461d4ee6cb65ea00408c027cba465ca2add4f413b85b02116e0dcad372c88d069b24822917083d1"}) (async) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r4, r5, 0x3}) (async) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:45 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005) 21:50:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) getsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420002, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/37) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) userfaultfd(0x80000) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x420002, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x2000)=nil) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) (async) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/37) (async) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) 21:50:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="4cbbe559bf2a2f0b2f3c331560bff2ec8e5809a21c28a82064cf1bf20b288edf53799bde63ff2ddb9c1bb0773dc36d644ecd06dce280ceb31007a8db24d58f5b12824e3c8b7e079b4431be7d20cb6cc0611870a6ae16", 0xff01, r0}, 0x68) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = gettid() (async) r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x5, 0x1) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000340)=""/12) (async) r4 = epoll_create1(0x0) (async) r5 = memfd_create(&(0x7f0000000100)=']*[i\x00', 0x4) (async) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x6, 0xb6b, 0x1f, 0x10001, 0x2, 0x8}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x5, 0xab, &(0x7f0000000200)="eee8eca61955d9cd55866ca11c1474f8586975c8303207069ad67104dcd960887d21ac8e7e9fd3c48351928e39a38bd0bedaf59c5c1db52ef231ee889987df5170dbde98fa853168fe86bfa3d3cd5546d0ec2290dfbd272c2fcd046e33937b96f40627ce3313e38bf16df3df96dc18019e1db7dbc7da10decc888c8edfd9ff3e97e42ea461d4ee6cb65ea00408c027cba465ca2add4f413b85b02116e0dcad372c88d069b24822917083d1"}) (async) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r4, r5, 0x3}) 21:50:45 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x5000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:45 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) 21:50:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0x0, 0x74000000}, {0x4}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x7, 0x80, 0x7f, 0xc35}, {0x100, 0x4, 0xff, 0x3}, {0x5, 0x0, 0x6e, 0x3ff}, {0x101, 0x92, 0x2, 0x1}, {0x1f, 0x3, 0x0, 0x101}]}) 21:50:45 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x5000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:45 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x100000000) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 21:50:45 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 32) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) 21:50:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0x0, 0x74000000}, {0x4}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x7, 0x80, 0x7f, 0xc35}, {0x100, 0x4, 0xff, 0x3}, {0x5, 0x0, 0x6e, 0x3ff}, {0x101, 0x92, 0x2, 0x1}, {0x1f, 0x3, 0x0, 0x101}]}) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x5, 0x0, 0x81}]}) 21:50:45 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x100000000) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x5000)=nil) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:45 executing program 0: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000fff000/0x1000)=nil}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x4000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x4c9e, "f3c1ddff55a87c373925fdfee65926a1d97f21d9d2553e7946c9a85b3268d359"}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="22082dbd7000fddb7a2f1b000004"], 0x14}, 0x1, 0x0, 0x0, 0x50801}, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) connect$caif(r1, &(0x7f0000000100)=@dgm={0x25, 0x2, 0x2}, 0x18) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0x3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, 0x140c, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x5, 0x0, 0x81}]}) 21:50:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0x0, 0x74000000}, {0x4}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x7, 0x80, 0x7f, 0xc35}, {0x100, 0x4, 0xff, 0x3}, {0x5, 0x0, 0x6e, 0x3ff}, {0x101, 0x92, 0x2, 0x1}, {0x1f, 0x3, 0x0, 0x101}]}) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:45 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x100000000) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) 21:50:45 executing program 0: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000fff000/0x1000)=nil}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x4000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x4c9e, "f3c1ddff55a87c373925fdfee65926a1d97f21d9d2553e7946c9a85b3268d359"}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="22082dbd7000fddb7a2f1b000004"], 0x14}, 0x1, 0x0, 0x0, 0x50801}, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) connect$caif(r1, &(0x7f0000000100)=@dgm={0x25, 0x2, 0x2}, 0x18) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0x3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, 0x140c, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x4000) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x4c9e, "f3c1ddff55a87c373925fdfee65926a1d97f21d9d2553e7946c9a85b3268d359"}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="22082dbd7000fddb7a2f1b000004"], 0x14}, 0x1, 0x0, 0x0, 0x50801}, 0x1) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) connect$caif(r1, &(0x7f0000000100)=@dgm={0x25, 0x2, 0x2}, 0x18) (async) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0x3) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, 0x140c, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x5, 0x0, 0x81}]}) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:45 executing program 1: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x34, 0x0, [0xa44, 0x8, 0x5, 0x9, 0x3, 0x1, 0xfffff19c, 0x20, 0x8, 0x0, 0x80000000, 0xbb, 0x101, 0x6, 0x81, 0x2]}, {0x8, 0x0, [0x7ff, 0x3f, 0x5, 0xb0, 0x100, 0x3f, 0xee65, 0x8000, 0x0, 0x2, 0x69cc, 0xfffffffc, 0xfffffffb, 0x1, 0xfffff001, 0x2]}, {0x24, 0x0, [0x3f, 0x0, 0x8000, 0x0, 0x5b, 0x9, 0x988, 0x7, 0x0, 0x800, 0x80000000, 0x1000, 0x1f, 0x2, 0x3, 0xfffffff7]}, {0x32, 0x0, [0xe8abdb5, 0x80000001, 0x1ff, 0x5, 0xd525, 0x1800, 0x5, 0x2, 0x1, 0x4, 0x7ffa7af8, 0x3f, 0x5, 0x8694, 0x8, 0x2]}, {0x6, 0x0, [0x0, 0x7f, 0x1, 0x2, 0x1, 0x100, 0xbf0, 0x6, 0xdf8c, 0xffffffc1, 0xff, 0x3ff, 0x7f, 0x0, 0xf45, 0x80]}, {0x2, 0x0, [0x7, 0x4, 0xa363, 0x7, 0xff, 0x1f, 0x9, 0x69b, 0x5, 0x2, 0x1, 0x8, 0x2e3, 0x80000000, 0x9]}, {0x6, 0x0, [0x0, 0x200, 0x80000000, 0x9, 0x2, 0x1ff, 0x1, 0x2, 0x400, 0x508, 0xb098, 0xfffffffa, 0xffffffff, 0x1, 0x10000]}, {0x0, 0x0, [0x2, 0xffff, 0x1, 0x101, 0x7ff, 0xffff6fa7, 0x8, 0x5, 0x8001, 0x8, 0x37, 0x101, 0xffc00000, 0x80000000, 0xffff, 0x8e7f]}, {0x20, 0x0, [0x1f, 0x3fff80, 0x1, 0x3ff, 0x4, 0x200, 0x1f, 0x7, 0x9, 0x6, 0x101, 0xffff, 0x7, 0xb27, 0x4, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) 21:50:45 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x77, 0xfc, 0xf3, 0x2, 0x0, 0x9, 0x88100, 0xb543c2cb8f73c9a5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100a1, 0x3, 0x7, 0x2, 0x9, 0x8, 0x1ff, 0x0, 0x5, 0x0, 0x1}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x4e, 0xff, 0x2b, 0xa4, 0x0, 0x8000000000000000, 0x6480, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1, 0x7fffffff, 0xbfa, 0x1, 0xe24, 0x2, 0x4, 0x0, 0x7, 0x0, 0xea2}, 0xffffffffffffffff, 0x10, r0, 0xe) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="3944b26c943b7078b595a1fe5b443e4aedda06c1fe182c", 0x17}, 0x68) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {}]}) 21:50:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x5, 0x0, 0x81}]}) 21:50:45 executing program 0: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x4000) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x4c9e, "f3c1ddff55a87c373925fdfee65926a1d97f21d9d2553e7946c9a85b3268d359"}) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="22082dbd7000fddb7a2f1b000004"], 0x14}, 0x1, 0x0, 0x0, 0x50801}, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) connect$caif(r1, &(0x7f0000000100)=@dgm={0x25, 0x2, 0x2}, 0x18) (async, rerun: 32) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0x3) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, 0x140c, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 21:50:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {}]}) 21:50:45 executing program 1: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x34, 0x0, [0xa44, 0x8, 0x5, 0x9, 0x3, 0x1, 0xfffff19c, 0x20, 0x8, 0x0, 0x80000000, 0xbb, 0x101, 0x6, 0x81, 0x2]}, {0x8, 0x0, [0x7ff, 0x3f, 0x5, 0xb0, 0x100, 0x3f, 0xee65, 0x8000, 0x0, 0x2, 0x69cc, 0xfffffffc, 0xfffffffb, 0x1, 0xfffff001, 0x2]}, {0x24, 0x0, [0x3f, 0x0, 0x8000, 0x0, 0x5b, 0x9, 0x988, 0x7, 0x0, 0x800, 0x80000000, 0x1000, 0x1f, 0x2, 0x3, 0xfffffff7]}, {0x32, 0x0, [0xe8abdb5, 0x80000001, 0x1ff, 0x5, 0xd525, 0x1800, 0x5, 0x2, 0x1, 0x4, 0x7ffa7af8, 0x3f, 0x5, 0x8694, 0x8, 0x2]}, {0x6, 0x0, [0x0, 0x7f, 0x1, 0x2, 0x1, 0x100, 0xbf0, 0x6, 0xdf8c, 0xffffffc1, 0xff, 0x3ff, 0x7f, 0x0, 0xf45, 0x80]}, {0x2, 0x0, [0x7, 0x4, 0xa363, 0x7, 0xff, 0x1f, 0x9, 0x69b, 0x5, 0x2, 0x1, 0x8, 0x2e3, 0x80000000, 0x9]}, {0x6, 0x0, [0x0, 0x200, 0x80000000, 0x9, 0x2, 0x1ff, 0x1, 0x2, 0x400, 0x508, 0xb098, 0xfffffffa, 0xffffffff, 0x1, 0x10000]}, {0x0, 0x0, [0x2, 0xffff, 0x1, 0x101, 0x7ff, 0xffff6fa7, 0x8, 0x5, 0x8001, 0x8, 0x37, 0x101, 0xffc00000, 0x80000000, 0xffff, 0x8e7f]}, {0x20, 0x0, [0x1f, 0x3fff80, 0x1, 0x3ff, 0x4, 0x200, 0x1f, 0x7, 0x9, 0x6, 0x101, 0xffff, 0x7, 0xb27, 0x4, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x34, 0x0, [0xa44, 0x8, 0x5, 0x9, 0x3, 0x1, 0xfffff19c, 0x20, 0x8, 0x0, 0x80000000, 0xbb, 0x101, 0x6, 0x81, 0x2]}, {0x8, 0x0, [0x7ff, 0x3f, 0x5, 0xb0, 0x100, 0x3f, 0xee65, 0x8000, 0x0, 0x2, 0x69cc, 0xfffffffc, 0xfffffffb, 0x1, 0xfffff001, 0x2]}, {0x24, 0x0, [0x3f, 0x0, 0x8000, 0x0, 0x5b, 0x9, 0x988, 0x7, 0x0, 0x800, 0x80000000, 0x1000, 0x1f, 0x2, 0x3, 0xfffffff7]}, {0x32, 0x0, [0xe8abdb5, 0x80000001, 0x1ff, 0x5, 0xd525, 0x1800, 0x5, 0x2, 0x1, 0x4, 0x7ffa7af8, 0x3f, 0x5, 0x8694, 0x8, 0x2]}, {0x6, 0x0, [0x0, 0x7f, 0x1, 0x2, 0x1, 0x100, 0xbf0, 0x6, 0xdf8c, 0xffffffc1, 0xff, 0x3ff, 0x7f, 0x0, 0xf45, 0x80]}, {0x2, 0x0, [0x7, 0x4, 0xa363, 0x7, 0xff, 0x1f, 0x9, 0x69b, 0x5, 0x2, 0x1, 0x8, 0x2e3, 0x80000000, 0x9]}, {0x6, 0x0, [0x0, 0x200, 0x80000000, 0x9, 0x2, 0x1ff, 0x1, 0x2, 0x400, 0x508, 0xb098, 0xfffffffa, 0xffffffff, 0x1, 0x10000]}, {0x0, 0x0, [0x2, 0xffff, 0x1, 0x101, 0x7ff, 0xffff6fa7, 0x8, 0x5, 0x8001, 0x8, 0x37, 0x101, 0xffc00000, 0x80000000, 0xffff, 0x8e7f]}, {0x20, 0x0, [0x1f, 0x3fff80, 0x1, 0x3ff, 0x4, 0x200, 0x1f, 0x7, 0x9, 0x6, 0x101, 0xffff, 0x7, 0xb27, 0x4, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) (async) 21:50:45 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x77, 0xfc, 0xf3, 0x2, 0x0, 0x9, 0x88100, 0xb543c2cb8f73c9a5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100a1, 0x3, 0x7, 0x2, 0x9, 0x8, 0x1ff, 0x0, 0x5, 0x0, 0x1}) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x4e, 0xff, 0x2b, 0xa4, 0x0, 0x8000000000000000, 0x6480, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1, 0x7fffffff, 0xbfa, 0x1, 0xe24, 0x2, 0x4, 0x0, 0x7, 0x0, 0xea2}, 0xffffffffffffffff, 0x10, r0, 0xe) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) (async, rerun: 32) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="3944b26c943b7078b595a1fe5b443e4aedda06c1fe182c", 0x17}, 0x68) 21:50:45 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:45 executing program 2: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x34, 0x0, [0xa44, 0x8, 0x5, 0x9, 0x3, 0x1, 0xfffff19c, 0x20, 0x8, 0x0, 0x80000000, 0xbb, 0x101, 0x6, 0x81, 0x2]}, {0x8, 0x0, [0x7ff, 0x3f, 0x5, 0xb0, 0x100, 0x3f, 0xee65, 0x8000, 0x0, 0x2, 0x69cc, 0xfffffffc, 0xfffffffb, 0x1, 0xfffff001, 0x2]}, {0x24, 0x0, [0x3f, 0x0, 0x8000, 0x0, 0x5b, 0x9, 0x988, 0x7, 0x0, 0x800, 0x80000000, 0x1000, 0x1f, 0x2, 0x3, 0xfffffff7]}, {0x32, 0x0, [0xe8abdb5, 0x80000001, 0x1ff, 0x5, 0xd525, 0x1800, 0x5, 0x2, 0x1, 0x4, 0x7ffa7af8, 0x3f, 0x5, 0x8694, 0x8, 0x2]}, {0x6, 0x0, [0x0, 0x7f, 0x1, 0x2, 0x1, 0x100, 0xbf0, 0x6, 0xdf8c, 0xffffffc1, 0xff, 0x3ff, 0x7f, 0x0, 0xf45, 0x80]}, {0x2, 0x0, [0x7, 0x4, 0xa363, 0x7, 0xff, 0x1f, 0x9, 0x69b, 0x5, 0x2, 0x1, 0x8, 0x2e3, 0x80000000, 0x9]}, {0x6, 0x0, [0x0, 0x200, 0x80000000, 0x9, 0x2, 0x1ff, 0x1, 0x2, 0x400, 0x508, 0xb098, 0xfffffffa, 0xffffffff, 0x1, 0x10000]}, {0x0, 0x0, [0x2, 0xffff, 0x1, 0x101, 0x7ff, 0xffff6fa7, 0x8, 0x5, 0x8001, 0x8, 0x37, 0x101, 0xffc00000, 0x80000000, 0xffff, 0x8e7f]}, {0x20, 0x0, [0x1f, 0x3fff80, 0x1, 0x3ff, 0x4, 0x200, 0x1f, 0x7, 0x9, 0x6, 0x101, 0xffff, 0x7, 0xb27, 0x4, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) 21:50:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x5, 0x0, 0x81}, {}]}) 21:50:46 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0xf4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xf7a976f4f6f65b39, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x5, 0x4) 21:50:46 executing program 1: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x34, 0x0, [0xa44, 0x8, 0x5, 0x9, 0x3, 0x1, 0xfffff19c, 0x20, 0x8, 0x0, 0x80000000, 0xbb, 0x101, 0x6, 0x81, 0x2]}, {0x8, 0x0, [0x7ff, 0x3f, 0x5, 0xb0, 0x100, 0x3f, 0xee65, 0x8000, 0x0, 0x2, 0x69cc, 0xfffffffc, 0xfffffffb, 0x1, 0xfffff001, 0x2]}, {0x24, 0x0, [0x3f, 0x0, 0x8000, 0x0, 0x5b, 0x9, 0x988, 0x7, 0x0, 0x800, 0x80000000, 0x1000, 0x1f, 0x2, 0x3, 0xfffffff7]}, {0x32, 0x0, [0xe8abdb5, 0x80000001, 0x1ff, 0x5, 0xd525, 0x1800, 0x5, 0x2, 0x1, 0x4, 0x7ffa7af8, 0x3f, 0x5, 0x8694, 0x8, 0x2]}, {0x6, 0x0, [0x0, 0x7f, 0x1, 0x2, 0x1, 0x100, 0xbf0, 0x6, 0xdf8c, 0xffffffc1, 0xff, 0x3ff, 0x7f, 0x0, 0xf45, 0x80]}, {0x2, 0x0, [0x7, 0x4, 0xa363, 0x7, 0xff, 0x1f, 0x9, 0x69b, 0x5, 0x2, 0x1, 0x8, 0x2e3, 0x80000000, 0x9]}, {0x6, 0x0, [0x0, 0x200, 0x80000000, 0x9, 0x2, 0x1ff, 0x1, 0x2, 0x400, 0x508, 0xb098, 0xfffffffa, 0xffffffff, 0x1, 0x10000]}, {0x0, 0x0, [0x2, 0xffff, 0x1, 0x101, 0x7ff, 0xffff6fa7, 0x8, 0x5, 0x8001, 0x8, 0x37, 0x101, 0xffc00000, 0x80000000, 0xffff, 0x8e7f]}, {0x20, 0x0, [0x1f, 0x3fff80, 0x1, 0x3ff, 0x4, 0x200, 0x1f, 0x7, 0x9, 0x6, 0x101, 0xffff, 0x7, 0xb27, 0x4, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) 21:50:46 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x77, 0xfc, 0xf3, 0x2, 0x0, 0x9, 0x88100, 0xb543c2cb8f73c9a5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100a1, 0x3, 0x7, 0x2, 0x9, 0x8, 0x1ff, 0x0, 0x5, 0x0, 0x1}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x4e, 0xff, 0x2b, 0xa4, 0x0, 0x8000000000000000, 0x6480, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1, 0x7fffffff, 0xbfa, 0x1, 0xe24, 0x2, 0x4, 0x0, 0x7, 0x0, 0xea2}, 0xffffffffffffffff, 0x10, r0, 0xe) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) (async) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="3944b26c943b7078b595a1fe5b443e4aedda06c1fe182c", 0x17}, 0x68) 21:50:46 executing program 2: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:46 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0xf4) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xf7a976f4f6f65b39, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x5, 0x4) 21:50:46 executing program 0: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) 21:50:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000000)={0x0, 0x1, 0x2}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r1, 0x948}) 21:50:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 1) 21:50:46 executing program 0: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) 21:50:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) 21:50:46 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0xf4) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xf7a976f4f6f65b39, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x5, 0x4) 21:50:46 executing program 5: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000000)={0x0, 0x1, 0x2}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r1, 0x948}) 21:50:46 executing program 0: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) (async) 21:50:46 executing program 5: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{}]}) 21:50:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000000)={0x0, 0x1, 0x2}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r1, 0x948}) 21:50:46 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) [ 1750.685795] kauditd_printk_skb: 23 callbacks suppressed [ 1750.685802] audit: type=1326 audit(1651355446.216:36): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31982 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x0 [ 1750.691118] FAULT_INJECTION: forcing a failure. [ 1750.691118] name failslab, interval 1, probability 0, space 0, times 0 21:50:46 executing program 4: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000011) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x4000010, 0xffffffffffffffff, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 1750.806133] CPU: 1 PID: 31989 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1750.814027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1750.823373] Call Trace: [ 1750.825961] dump_stack+0x1b2/0x281 [ 1750.829586] should_fail.cold+0x10a/0x149 [ 1750.833733] should_failslab+0xd6/0x130 [ 1750.837705] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1750.842369] ? security_capable_noaudit+0x85/0xb0 [ 1750.847211] do_seccomp+0x2e9/0x19c0 [ 1750.850921] ? wait_for_completion_io+0x10/0x10 [ 1750.855586] ? vfs_write+0x319/0x4d0 [ 1750.859299] ? __seccomp_filter+0xdd0/0xdd0 [ 1750.863609] ? SyS_write+0x14d/0x210 [ 1750.867307] ? SyS_read+0x210/0x210 [ 1750.870910] ? __do_page_fault+0x159/0xad0 [ 1750.875123] ? do_syscall_64+0x4c/0x640 [ 1750.879076] ? prctl_get_seccomp+0x50/0x50 [ 1750.883288] do_syscall_64+0x1d5/0x640 [ 1750.887156] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1750.892321] RIP: 0033:0x7fe46ce7b0e9 [ 1750.896010] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d 21:50:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 2) 21:50:46 executing program 5: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:46 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) 21:50:46 executing program 4: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000011) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x4000010, 0xffffffffffffffff, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000011) (async) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x4000010, 0xffffffffffffffff, 0x5) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {0x0, 0x0, 0x0, 0x6}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x7f, 0x3, 0x3}]}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xff, 0x1, 0xffffffffffffffff, 0x3, 0x1bd7, 0x3ff, 0x8, 0x5}, &(0x7f00000001c0)={0xa6, 0x7fffffff, 0x0, 0x0, 0x10000, 0xc1a, 0x2, 0x6}, &(0x7f0000000200)={0x74, 0x1, 0x9, 0x3, 0x407, 0x3, 0x1f, 0x2}, &(0x7f00000002c0)={r3, r4+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x59d7]}, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x2, r0, 0x1}) 21:50:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{}]}) [ 1750.903694] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1750.910936] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1750.918179] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1750.925423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.932670] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 21:50:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {0x0, 0x0, 0x0, 0x6}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x7f, 0x3, 0x3}]}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xff, 0x1, 0xffffffffffffffff, 0x3, 0x1bd7, 0x3ff, 0x8, 0x5}, &(0x7f00000001c0)={0xa6, 0x7fffffff, 0x0, 0x0, 0x10000, 0xc1a, 0x2, 0x6}, &(0x7f0000000200)={0x74, 0x1, 0x9, 0x3, 0x407, 0x3, 0x1f, 0x2}, &(0x7f00000002c0)={r3, r4+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x59d7]}, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x2, r0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {0x0, 0x0, 0x0, 0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x7f, 0x3, 0x3}]}) (async) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x3) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) (async) clock_gettime(0x0, &(0x7f0000000280)) (async) pselect6(0x40, &(0x7f0000000180)={0xff, 0x1, 0xffffffffffffffff, 0x3, 0x1bd7, 0x3ff, 0x8, 0x5}, &(0x7f00000001c0)={0xa6, 0x7fffffff, 0x0, 0x0, 0x10000, 0xc1a, 0x2, 0x6}, &(0x7f0000000200)={0x74, 0x1, 0x9, 0x3, 0x407, 0x3, 0x1f, 0x2}, &(0x7f00000002c0)={r3, r4+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x59d7]}, 0x8}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x2, r0, 0x1}) (async) 21:50:46 executing program 4: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000011) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x4000010, 0xffffffffffffffff, 0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000011) (async) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x4000010, 0xffffffffffffffff, 0x5) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 21:50:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{}]}) 21:50:46 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000008) 21:50:46 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) 21:50:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {0x0, 0x0, 0x0, 0x6}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x7f, 0x3, 0x3}]}) (async) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x3) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xff, 0x1, 0xffffffffffffffff, 0x3, 0x1bd7, 0x3ff, 0x8, 0x5}, &(0x7f00000001c0)={0xa6, 0x7fffffff, 0x0, 0x0, 0x10000, 0xc1a, 0x2, 0x6}, &(0x7f0000000200)={0x74, 0x1, 0x9, 0x3, 0x407, 0x3, 0x1f, 0x2}, &(0x7f00000002c0)={r3, r4+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x59d7]}, 0x8}) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x2, r0, 0x1}) (rerun: 32) [ 1751.030736] FAULT_INJECTION: forcing a failure. [ 1751.030736] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.086556] CPU: 0 PID: 32033 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1751.094453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.103797] Call Trace: [ 1751.106380] dump_stack+0x1b2/0x281 [ 1751.110007] should_fail.cold+0x10a/0x149 [ 1751.114156] should_failslab+0xd6/0x130 [ 1751.118129] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1751.123230] __get_vm_area_node+0xed/0x340 [ 1751.127464] ? bpf_prog_alloc+0x3a/0x1e0 [ 1751.131515] __vmalloc+0xfe/0x1d0 [ 1751.134966] ? bpf_prog_alloc+0x3a/0x1e0 [ 1751.139023] ? vzalloc+0x150/0x150 [ 1751.142566] bpf_prog_alloc+0x3a/0x1e0 [ 1751.146450] bpf_prog_create_from_user+0x99/0x290 [ 1751.151287] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1751.156996] do_seccomp+0x31b/0x19c0 [ 1751.160710] ? wait_for_completion_io+0x10/0x10 [ 1751.165376] ? vfs_write+0x319/0x4d0 [ 1751.169082] ? __seccomp_filter+0xdd0/0xdd0 [ 1751.173395] ? SyS_write+0x14d/0x210 [ 1751.177103] ? SyS_read+0x210/0x210 [ 1751.180728] ? __do_page_fault+0x159/0xad0 [ 1751.184960] ? do_syscall_64+0x4c/0x640 [ 1751.188919] ? prctl_get_seccomp+0x50/0x50 [ 1751.193131] do_syscall_64+0x1d5/0x640 [ 1751.196999] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1751.202169] RIP: 0033:0x7fe46ce7b0e9 [ 1751.205868] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1751.213561] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1751.220804] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1751.228054] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.235297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1751.242544] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 [ 1751.254347] syz-executor.2: vmalloc: allocation failure: 4096 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1751.265781] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1751.270912] CPU: 0 PID: 32033 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1751.278776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.288107] Call Trace: [ 1751.290678] dump_stack+0x1b2/0x281 [ 1751.294292] warn_alloc.cold+0x96/0x1cc [ 1751.298245] ? zone_watermark_ok_safe+0x220/0x220 [ 1751.303086] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1751.308524] ? __get_vm_area_node+0xed/0x340 [ 1751.312909] ? __get_vm_area_node+0x27d/0x340 [ 1751.317386] ? bpf_prog_alloc+0x3a/0x1e0 [ 1751.321426] __vmalloc+0x170/0x1d0 [ 1751.324957] ? vzalloc+0x150/0x150 [ 1751.328493] bpf_prog_alloc+0x3a/0x1e0 [ 1751.332365] bpf_prog_create_from_user+0x99/0x290 [ 1751.337194] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1751.342895] do_seccomp+0x31b/0x19c0 [ 1751.346602] ? wait_for_completion_io+0x10/0x10 [ 1751.351258] ? vfs_write+0x319/0x4d0 [ 1751.355007] ? __seccomp_filter+0xdd0/0xdd0 [ 1751.359316] ? SyS_write+0x14d/0x210 [ 1751.363013] ? SyS_read+0x210/0x210 [ 1751.366626] ? __do_page_fault+0x159/0xad0 [ 1751.370871] ? do_syscall_64+0x4c/0x640 [ 1751.374823] ? prctl_get_seccomp+0x50/0x50 [ 1751.379035] do_syscall_64+0x1d5/0x640 [ 1751.382915] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1751.388090] RIP: 0033:0x7fe46ce7b0e9 [ 1751.391782] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1751.399474] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1751.406729] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1751.413982] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.421227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1751.428474] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 [ 1751.436276] Mem-Info: [ 1751.438701] active_anon:16757 inactive_anon:6744 isolated_anon:0 [ 1751.438701] active_file:5787 inactive_file:10916 isolated_file:0 [ 1751.438701] unevictable:0 dirty:177 writeback:0 unstable:0 [ 1751.438701] slab_reclaimable:26192 slab_unreclaimable:120918 [ 1751.438701] mapped:30607 shmem:7082 pagetables:571 bounce:0 [ 1751.438701] free:1478232 free_pcp:345 free_cma:0 [ 1751.472610] Node 0 active_anon:67028kB inactive_anon:26976kB active_file:23020kB inactive_file:43664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122440kB dirty:716kB writeback:0kB shmem:28328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1751.500966] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1751.526787] Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1751.552960] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1751.557981] Node 0 DMA32 free:1857164kB min:36196kB low:45244kB high:54292kB active_anon:67028kB inactive_anon:26976kB active_file:23020kB inactive_file:43664kB unevictable:0kB writepending:720kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7232kB pagetables:2284kB bounce:0kB free_pcp:1348kB local_pcp:724kB free_cma:0kB [ 1751.587897] lowmem_reserve[]: 0 0 0 0 0 [ 1751.591945] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1751.617777] lowmem_reserve[]: 0 0 0 0 0 [ 1751.621740] Node 1 Normal free:4040316kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1751.649401] lowmem_reserve[]: 0 0 0 0 0 [ 1751.653420] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1751.667061] Node 0 DMA32: 2106*4kB (UME) 442*8kB (UME) 49*16kB (UME) 64*32kB (UME) 245*64kB (UME) 44*128kB (U) 10*256kB (UME) 1*512kB (U) 1*1024kB (U) 3*2048kB (UE) 442*4096kB (UM) = 1856776kB [ 1751.684452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1751.695198] Node 1 Normal: 73*4kB (UME) 415*8kB (UE) 282*16kB (UM) 82*32kB (UME) 26*64kB (UM) 12*128kB (UM) 16*256kB (UME) 2*512kB (U) 3*1024kB (UME) 4*2048kB (UM) 979*4096kB (M) = 4040316kB [ 1751.712435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1751.721253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1751.729866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 21:50:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 3) 21:50:47 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20103, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x222200, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x3}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ff2000/0xe000)=nil}) 21:50:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x80000005}) 21:50:47 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000008) 21:50:47 executing program 0: shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 21:50:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 1751.738740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1751.747355] 23792 total pagecache pages [ 1751.751318] 0 pages in swap cache [ 1751.754801] Swap cache stats: add 0, delete 0, find 0/0 [ 1751.760146] Free swap = 0kB [ 1751.763186] Total swap = 0kB [ 1751.766195] 2097051 pages RAM [ 1751.769278] 0 pages HighMem/MovableOnly [ 1751.773275] 363897 pages reserved [ 1751.776710] 0 pages cma reserved 21:50:47 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000008) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000008) (async) 21:50:47 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20103, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x222200, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x3}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ff2000/0xe000)=nil}) 21:50:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x80000005}) 21:50:47 executing program 0: shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 21:50:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) (fail_nth: 1) [ 1751.848969] FAULT_INJECTION: forcing a failure. [ 1751.848969] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.859320] audit: type=1326 audit(1651355447.376:37): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32067 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x0 [ 1751.903711] CPU: 0 PID: 32074 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1751.911605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.920952] Call Trace: [ 1751.923537] dump_stack+0x1b2/0x281 [ 1751.927167] should_fail.cold+0x10a/0x149 [ 1751.931318] should_failslab+0xd6/0x130 [ 1751.935294] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1751.940397] alloc_vmap_area+0xf0/0x7c0 [ 1751.944372] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1751.949819] ? purge_vmap_area_lazy+0xb0/0xb0 21:50:47 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1, 0xbb33e1123a7be21c, 0xffffffffffffffff, 0x0) [ 1751.954310] ? __get_vm_area_node+0xed/0x340 [ 1751.958711] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1751.963990] __get_vm_area_node+0x126/0x340 [ 1751.968309] ? bpf_prog_alloc+0x3a/0x1e0 [ 1751.972357] __vmalloc+0xfe/0x1d0 [ 1751.975804] ? bpf_prog_alloc+0x3a/0x1e0 [ 1751.979859] ? vzalloc+0x150/0x150 [ 1751.983397] bpf_prog_alloc+0x3a/0x1e0 [ 1751.987280] bpf_prog_create_from_user+0x99/0x290 [ 1751.992115] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1751.997821] do_seccomp+0x31b/0x19c0 [ 1752.001530] ? wait_for_completion_io+0x10/0x10 [ 1752.006194] ? vfs_write+0x319/0x4d0 [ 1752.007143] FAULT_INJECTION: forcing a failure. [ 1752.007143] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.009902] ? __seccomp_filter+0xdd0/0xdd0 [ 1752.009914] ? SyS_write+0x14d/0x210 [ 1752.009927] ? SyS_read+0x210/0x210 [ 1752.032668] ? __do_page_fault+0x159/0xad0 [ 1752.036884] ? do_syscall_64+0x4c/0x640 [ 1752.040839] ? prctl_get_seccomp+0x50/0x50 [ 1752.045058] do_syscall_64+0x1d5/0x640 [ 1752.048936] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1752.054109] RIP: 0033:0x7fe46ce7b0e9 [ 1752.057813] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1752.065514] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1752.072770] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1752.080019] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.087269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.094518] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 [ 1752.111817] syz-executor.2: vmalloc: allocation failure: 4096 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1752.115942] CPU: 1 PID: 32089 Comm: syz-executor.3 Not tainted 4.14.277-syzkaller #0 [ 1752.123391] syz-executor.2 cpuset= [ 1752.130964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.130969] Call Trace: [ 1752.130985] dump_stack+0x1b2/0x281 [ 1752.131000] should_fail.cold+0x10a/0x149 [ 1752.134606] / [ 1752.143850] should_failslab+0xd6/0x130 [ 1752.143863] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1752.146624] mems_allowed=0-1 [ 1752.150110] ? security_capable_noaudit+0x85/0xb0 [ 1752.150124] do_seccomp+0x2e9/0x19c0 [ 1752.150134] ? wait_for_completion_io+0x10/0x10 [ 1752.150145] ? vfs_write+0x319/0x4d0 [ 1752.184448] ? __seccomp_filter+0xdd0/0xdd0 [ 1752.188750] ? SyS_write+0x14d/0x210 [ 1752.192447] ? SyS_read+0x210/0x210 [ 1752.196054] ? __do_page_fault+0x159/0xad0 [ 1752.200270] ? do_syscall_64+0x4c/0x640 [ 1752.204224] ? prctl_get_seccomp+0x50/0x50 [ 1752.208442] do_syscall_64+0x1d5/0x640 [ 1752.212314] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1752.217481] RIP: 0033:0x7fdf6b8e20e9 [ 1752.221171] RSP: 002b:00007fdf6a257168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1752.228859] RAX: ffffffffffffffda RBX: 00007fdf6b9f4f60 RCX: 00007fdf6b8e20e9 [ 1752.236109] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1752.243359] RBP: 00007fdf6a2571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.250609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.257857] R13: 00007ffe5d48296f R14: 00007fdf6a257300 R15: 0000000000022000 [ 1752.265175] CPU: 0 PID: 32074 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1752.273052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.282395] Call Trace: [ 1752.284977] dump_stack+0x1b2/0x281 [ 1752.288606] warn_alloc.cold+0x96/0x1cc [ 1752.292575] ? zone_watermark_ok_safe+0x220/0x220 [ 1752.297414] ? debug_object_activate+0x490/0x490 [ 1752.302169] ? __get_vm_area_node+0x2ad/0x340 [ 1752.306661] ? __get_vm_area_node+0x27d/0x340 [ 1752.311156] ? bpf_prog_alloc+0x3a/0x1e0 [ 1752.315211] __vmalloc+0x170/0x1d0 [ 1752.318738] ? vzalloc+0x150/0x150 [ 1752.322268] bpf_prog_alloc+0x3a/0x1e0 [ 1752.326140] bpf_prog_create_from_user+0x99/0x290 [ 1752.330958] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1752.336643] do_seccomp+0x31b/0x19c0 [ 1752.340335] ? wait_for_completion_io+0x10/0x10 [ 1752.344988] ? vfs_write+0x319/0x4d0 [ 1752.348682] ? __seccomp_filter+0xdd0/0xdd0 [ 1752.352982] ? SyS_write+0x14d/0x210 [ 1752.356671] ? SyS_read+0x210/0x210 [ 1752.360277] ? __do_page_fault+0x159/0xad0 [ 1752.364492] ? do_syscall_64+0x4c/0x640 [ 1752.368446] ? prctl_get_seccomp+0x50/0x50 [ 1752.372656] do_syscall_64+0x1d5/0x640 [ 1752.376519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1752.381696] RIP: 0033:0x7fe46ce7b0e9 [ 1752.385389] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1752.393071] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1752.400319] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 21:50:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 4) 21:50:47 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1, 0xbb33e1123a7be21c, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1, 0xbb33e1123a7be21c, 0xffffffffffffffff, 0x0) (async) 21:50:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x80000005}) 21:50:47 executing program 0: shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 21:50:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) (fail_nth: 2) 21:50:47 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20103, 0x0) (async, rerun: 32) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x222200, 0x0) (async, rerun: 64) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x3}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ff2000/0xe000)=nil}) [ 1752.407563] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.414805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.422056] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 21:50:48 executing program 0: shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2000007, 0x20010, r1, 0x82000000) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, r0, 0x82000000) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/122) 21:50:48 executing program 1: recvfrom$rose(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000, 0x2062, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, r1, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)=0x679) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000a004000000000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0x1a, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="b0790200ed453be6a31441b1f8f04cd28c0040272c607f6c72300800527204be59835900", @ANYRES16=r1, @ANYBLOB="020028bd7000fcdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b00090000000600110008000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00050000000600110006000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b001f0900000600110000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x8810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000012c0)={0x5, &(0x7f0000001280)=[{0x0, 0x52, 0x81, 0xc}, {0xfe00, 0x90, 0x80, 0xdbf5}, {0x4, 0x7f, 0xff, 0x1}, {0x1, 0x80, 0x4, 0xde}, {0xfff9, 0x0, 0x49, 0x9}]}) 21:50:48 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1, 0xbb33e1123a7be21c, 0xffffffffffffffff, 0x0) [ 1752.493354] FAULT_INJECTION: forcing a failure. [ 1752.493354] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.505009] FAULT_INJECTION: forcing a failure. [ 1752.505009] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.527352] CPU: 0 PID: 32103 Comm: syz-executor.3 Not tainted 4.14.277-syzkaller #0 [ 1752.535239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.544584] Call Trace: [ 1752.547168] dump_stack+0x1b2/0x281 [ 1752.550794] should_fail.cold+0x10a/0x149 [ 1752.554940] should_failslab+0xd6/0x130 [ 1752.558916] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1752.564019] __get_vm_area_node+0xed/0x340 [ 1752.568252] ? bpf_prog_alloc+0x3a/0x1e0 [ 1752.572304] __vmalloc+0xfe/0x1d0 [ 1752.575753] ? bpf_prog_alloc+0x3a/0x1e0 [ 1752.579805] ? vzalloc+0x150/0x150 [ 1752.583344] bpf_prog_alloc+0x3a/0x1e0 [ 1752.587229] bpf_prog_create_from_user+0x99/0x290 21:50:48 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="cdd13a8fc259369a87dcbc8b88b54b2cea7b587c8ec68c43ca92231e7c9416dd8318b162e4f21362b4c376fa10b0286855543a30d4b8d2f162c88756d69eb0d6da1540b74152f5588c7b42a4156a82a2c9660a40614c2bf15e0a7eda1949fff0b712a113d2860bd17309c2176ac2775c8ef2b29892a97bd4b570fd", 0x7b}, 0x68) [ 1752.592065] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1752.597771] do_seccomp+0x31b/0x19c0 [ 1752.601479] ? wait_for_completion_io+0x10/0x10 [ 1752.606140] ? vfs_write+0x319/0x4d0 [ 1752.609844] ? __seccomp_filter+0xdd0/0xdd0 [ 1752.614160] ? SyS_write+0x14d/0x210 [ 1752.617867] ? SyS_read+0x210/0x210 [ 1752.621493] ? __do_page_fault+0x159/0xad0 [ 1752.625722] ? do_syscall_64+0x4c/0x640 [ 1752.629695] ? prctl_get_seccomp+0x50/0x50 [ 1752.633961] do_syscall_64+0x1d5/0x640 [ 1752.637842] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1752.643021] RIP: 0033:0x7fdf6b8e20e9 [ 1752.646718] RSP: 002b:00007fdf6a257168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1752.654410] RAX: ffffffffffffffda RBX: 00007fdf6b9f4f60 RCX: 00007fdf6b8e20e9 [ 1752.661674] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1752.668932] RBP: 00007fdf6a2571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.676191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.683449] R13: 00007ffe5d48296f R14: 00007fdf6a257300 R15: 0000000000022000 [ 1752.690721] CPU: 1 PID: 32104 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1752.696485] syz-executor.3: [ 1752.698596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.698600] Call Trace: [ 1752.698615] dump_stack+0x1b2/0x281 [ 1752.698629] should_fail.cold+0x10a/0x149 [ 1752.701652] vmalloc: allocation failure: 4096 bytes [ 1752.710957] should_failslab+0xd6/0x130 [ 1752.710970] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1752.710983] __kmalloc_node+0x38/0x70 [ 1752.710992] __vmalloc_area_node+0x510/0x680 21:50:48 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:48 executing program 0: shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2000007, 0x20010, r1, 0x82000000) (async) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, r0, 0x82000000) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/122) [ 1752.711001] ? __get_vm_area_node+0xed/0x340 [ 1752.711013] ? __vmalloc_node_range+0x150/0x150 [ 1752.711020] ? __get_vm_area_node+0x27d/0x340 [ 1752.711034] ? bpf_prog_alloc+0x3a/0x1e0 [ 1752.711040] __vmalloc+0x120/0x1d0 [ 1752.711048] ? vzalloc+0x150/0x150 [ 1752.711062] bpf_prog_alloc+0x3a/0x1e0 [ 1752.711072] bpf_prog_create_from_user+0x99/0x290 [ 1752.711081] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1752.711092] do_seccomp+0x31b/0x19c0 [ 1752.711105] ? wait_for_completion_io+0x10/0x10 21:50:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 5) 21:50:48 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="cdd13a8fc259369a87dcbc8b88b54b2cea7b587c8ec68c43ca92231e7c9416dd8318b162e4f21362b4c376fa10b0286855543a30d4b8d2f162c88756d69eb0d6da1540b74152f5588c7b42a4156a82a2c9660a40614c2bf15e0a7eda1949fff0b712a113d2860bd17309c2176ac2775c8ef2b29892a97bd4b570fd", 0x7b}, 0x68) 21:50:48 executing program 1: recvfrom$rose(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000, 0x2062, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, r1, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x40) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)=0x679) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000a004000000000000"], 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0x1a, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="b0790200ed453be6a31441b1f8f04cd28c0040272c607f6c72300800527204be59835900", @ANYRES16=r1, @ANYBLOB="020028bd7000fcdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b00090000000600110008000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00050000000600110006000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b001f0900000600110000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x8810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000012c0)={0x5, &(0x7f0000001280)=[{0x0, 0x52, 0x81, 0xc}, {0xfe00, 0x90, 0x80, 0xdbf5}, {0x4, 0x7f, 0xff, 0x1}, {0x1, 0x80, 0x4, 0xde}, {0xfff9, 0x0, 0x49, 0x9}]}) [ 1752.713796] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1752.717263] ? vfs_write+0x319/0x4d0 [ 1752.717272] ? __seccomp_filter+0xdd0/0xdd0 [ 1752.717283] ? SyS_write+0x14d/0x210 [ 1752.721425] (null) [ 1752.726393] ? SyS_read+0x210/0x210 [ 1752.726403] ? __do_page_fault+0x159/0xad0 [ 1752.726413] ? do_syscall_64+0x4c/0x640 [ 1752.726420] ? prctl_get_seccomp+0x50/0x50 [ 1752.726429] do_syscall_64+0x1d5/0x640 [ 1752.730405] syz-executor.3 cpuset= [ 1752.735467] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1752.735475] RIP: 0033:0x7fe46ce7b0e9 [ 1752.735480] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1752.735493] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1752.739294] / [ 1752.743647] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1752.748091] mems_allowed=0-1 [ 1752.752687] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.752692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.752698] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 21:50:48 executing program 0: shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2000007, 0x20010, r1, 0x82000000) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, r0, 0x82000000) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/122) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) (async) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2000007, 0x20010, r1, 0x82000000) (async) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, r0, 0x82000000) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x0) (async) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/122) (async) [ 1752.910624] FAULT_INJECTION: forcing a failure. [ 1752.910624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1752.926114] CPU: 0 PID: 32103 Comm: syz-executor.3 Not tainted 4.14.277-syzkaller #0 [ 1752.934003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.943346] Call Trace: [ 1752.945928] dump_stack+0x1b2/0x281 [ 1752.949553] warn_alloc.cold+0x96/0x1cc [ 1752.953514] ? zone_watermark_ok_safe+0x220/0x220 [ 1752.958345] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1752.963788] ? __get_vm_area_node+0xed/0x340 [ 1752.968191] ? __get_vm_area_node+0x27d/0x340 [ 1752.972686] ? bpf_prog_alloc+0x3a/0x1e0 [ 1752.976738] __vmalloc+0x170/0x1d0 [ 1752.980270] ? vzalloc+0x150/0x150 [ 1752.983812] bpf_prog_alloc+0x3a/0x1e0 [ 1752.987696] bpf_prog_create_from_user+0x99/0x290 [ 1752.992531] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1752.998234] do_seccomp+0x31b/0x19c0 [ 1753.001936] ? wait_for_completion_io+0x10/0x10 [ 1753.006596] ? vfs_write+0x319/0x4d0 [ 1753.010300] ? __seccomp_filter+0xdd0/0xdd0 [ 1753.014616] ? SyS_write+0x14d/0x210 [ 1753.018326] ? SyS_read+0x210/0x210 [ 1753.021942] ? __do_page_fault+0x159/0xad0 [ 1753.026164] ? do_syscall_64+0x4c/0x640 [ 1753.030121] ? prctl_get_seccomp+0x50/0x50 [ 1753.034345] do_syscall_64+0x1d5/0x640 [ 1753.038231] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1753.043406] RIP: 0033:0x7fdf6b8e20e9 [ 1753.047098] RSP: 002b:00007fdf6a257168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1753.054794] RAX: ffffffffffffffda RBX: 00007fdf6b9f4f60 RCX: 00007fdf6b8e20e9 [ 1753.062050] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1753.069298] RBP: 00007fdf6a2571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.076546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.083794] R13: 00007ffe5d48296f R14: 00007fdf6a257300 R15: 0000000000022000 [ 1753.091059] CPU: 1 PID: 32136 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1753.098938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.103340] warn_alloc_show_mem: 1 callbacks suppressed [ 1753.103379] Mem-Info: [ 1753.108276] Call Trace: [ 1753.108291] dump_stack+0x1b2/0x281 [ 1753.108305] should_fail.cold+0x10a/0x149 [ 1753.113692] active_anon:17800 inactive_anon:6744 isolated_anon:0 [ 1753.113692] active_file:5787 inactive_file:10936 isolated_file:0 [ 1753.113692] unevictable:0 dirty:198 writeback:0 unstable:0 [ 1753.113692] slab_reclaimable:26004 slab_unreclaimable:121496 [ 1753.113692] mapped:30611 shmem:7082 pagetables:582 bounce:0 [ 1753.113692] free:1476805 free_pcp:246 free_cma:0 [ 1753.116034] __alloc_pages_nodemask+0x22c/0x2720 [ 1753.116045] ? bpf_prog_alloc+0x3a/0x1e0 [ 1753.118639] Node 0 active_anon:71200kB inactive_anon:26976kB active_file:23020kB inactive_file:43744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122444kB dirty:788kB writeback:0kB shmem:28328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1753.122210] ? do_seccomp+0x31b/0x19c0 [ 1753.122218] ? do_syscall_64+0x1d5/0x640 [ 1753.122229] ? trace_hardirqs_on+0x10/0x10 [ 1753.122243] ? __lock_acquire+0x5fc/0x3f20 [ 1753.126397] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1753.160192] ? unwind_get_return_address+0x51/0x90 [ 1753.160203] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1753.160212] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1753.160223] ? fs_reclaim_release+0xd0/0x110 [ 1753.160239] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1753.167883] Node 0 [ 1753.169185] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1753.169195] ? __kmalloc_node+0x38/0x70 [ 1753.169207] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1753.198144] DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1753.201332] alloc_pages_current+0x155/0x260 [ 1753.201347] __vmalloc_area_node+0x40a/0x680 [ 1753.205424] lowmem_reserve[]: [ 1753.209601] ? __vmalloc_node_range+0x150/0x150 [ 1753.209614] ? __get_vm_area_node+0x27d/0x340 [ 1753.213857] 0 [ 1753.239654] ? bpf_prog_alloc+0x3a/0x1e0 [ 1753.239661] __vmalloc+0x120/0x1d0 [ 1753.239670] ? vzalloc+0x150/0x150 [ 1753.239683] bpf_prog_alloc+0x3a/0x1e0 [ 1753.244628] 2717 [ 1753.249933] bpf_prog_create_from_user+0x99/0x290 [ 1753.249942] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1753.249953] do_seccomp+0x31b/0x19c0 [ 1753.254798] 2718 [ 1753.259153] ? wait_for_completion_io+0x10/0x10 [ 1753.259163] ? vfs_write+0x319/0x4d0 [ 1753.259173] ? __seccomp_filter+0xdd0/0xdd0 [ 1753.264726] 2718 [ 1753.266911] ? SyS_write+0x14d/0x210 [ 1753.266919] ? SyS_read+0x210/0x210 [ 1753.266930] ? __do_page_fault+0x159/0xad0 [ 1753.272124] 2718 [ 1753.276052] ? do_syscall_64+0x4c/0x640 [ 1753.276060] ? prctl_get_seccomp+0x50/0x50 [ 1753.276069] do_syscall_64+0x1d5/0x640 [ 1753.307066] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1753.307076] RIP: 0033:0x7fe46ce7b0e9 [ 1753.307080] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1753.311490] Node 0 [ 1753.315860] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1753.315865] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1753.315870] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.315876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.315881] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 [ 1753.350623] syz-executor.2: [ 1753.370953] DMA32 free:1851164kB min:36196kB low:45244kB high:54292kB active_anon:69260kB inactive_anon:26976kB active_file:23020kB inactive_file:43744kB unevictable:0kB writepending:788kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7264kB pagetables:2328kB bounce:0kB free_pcp:920kB local_pcp:496kB free_cma:0kB [ 1753.375189] vmalloc: allocation failure, allocated 0 of 8192 bytes [ 1753.383027] lowmem_reserve[]: [ 1753.386697] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1753.390320] 0 [ 1753.393029] (null) [ 1753.399617] 0 [ 1753.400656] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1753.400679] CPU: 1 PID: 32136 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1753.400687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.404663] 0 [ 1753.409752] Call Trace: [ 1753.409767] dump_stack+0x1b2/0x281 [ 1753.409782] warn_alloc.cold+0x96/0x1cc [ 1753.409795] ? zone_watermark_ok_safe+0x220/0x220 [ 1753.413553] 0 [ 1753.421177] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1753.421190] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1753.421199] ? __kmalloc_node+0x38/0x70 [ 1753.421210] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1753.423493] 0 [ 1753.430685] __vmalloc_area_node+0x48a/0x680 [ 1753.430701] ? __vmalloc_node_range+0x150/0x150 [ 1753.430707] ? __get_vm_area_node+0x27d/0x340 [ 1753.430722] ? bpf_prog_alloc+0x3a/0x1e0 [ 1753.445224] __vmalloc+0x120/0x1d0 [ 1753.445234] ? vzalloc+0x150/0x150 [ 1753.445249] bpf_prog_alloc+0x3a/0x1e0 [ 1753.445260] bpf_prog_create_from_user+0x99/0x290 [ 1753.445272] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1753.452606] Node 0 [ 1753.459789] do_seccomp+0x31b/0x19c0 [ 1753.459803] ? wait_for_completion_io+0x10/0x10 [ 1753.459812] ? vfs_write+0x319/0x4d0 [ 1753.459822] ? __seccomp_filter+0xdd0/0xdd0 [ 1753.462898] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1753.491965] ? SyS_write+0x14d/0x210 [ 1753.491974] ? SyS_read+0x210/0x210 [ 1753.491984] ? __do_page_fault+0x159/0xad0 [ 1753.491994] ? do_syscall_64+0x4c/0x640 [ 1753.492002] ? prctl_get_seccomp+0x50/0x50 [ 1753.492010] do_syscall_64+0x1d5/0x640 [ 1753.492026] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1753.492037] RIP: 0033:0x7fe46ce7b0e9 [ 1753.498417] lowmem_reserve[]: [ 1753.501412] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1753.501423] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1753.501429] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1753.501435] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.501440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.501447] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 [ 1753.507463] 0 0 0 0 0 [ 1753.740766] Node 1 Normal free:4040316kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1753.769536] lowmem_reserve[]: 0 0 0 0 0 [ 1753.773578] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1753.787208] Node 0 DMA32: 2259*4kB (UME) 741*8kB (UME) 72*16kB (UME) 17*32kB (UME) 221*64kB (UME) 46*128kB (U) 10*256kB (UME) 1*512kB (U) 1*1024kB (U) 3*2048kB (UE) 442*4096kB (UM) = 1857364kB [ 1753.804603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1753.815353] Node 1 Normal: 73*4kB (UME) 415*8kB (UE) 282*16kB (UM) 82*32kB (UME) 26*64kB (UM) 12*128kB (UM) 16*256kB (UME) 2*512kB (U) 3*1024kB (UME) 4*2048kB (UM) 979*4096kB (M) = 4040316kB [ 1753.832586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1753.841408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1753.850061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 21:50:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1, 0x9, 0xfffff000}) 21:50:49 executing program 1: recvfrom$rose(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000, 0x2062, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, r1, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x40) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) (async) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)=0x679) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async, rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000a004000000000000"], 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0x1a, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="b0790200ed453be6a31441b1f8f04cd28c0040272c607f6c72300800527204be59835900", @ANYRES16=r1, @ANYBLOB="020028bd7000fcdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b00090000000600110008000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00050000000600110006000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b001f0900000600110000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x8810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000012c0)={0x5, &(0x7f0000001280)=[{0x0, 0x52, 0x81, 0xc}, {0xfe00, 0x90, 0x80, 0xdbf5}, {0x4, 0x7f, 0xff, 0x1}, {0x1, 0x80, 0x4, 0xde}, {0xfff9, 0x0, 0x49, 0x9}]}) 21:50:49 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:49 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="cdd13a8fc259369a87dcbc8b88b54b2cea7b587c8ec68c43ca92231e7c9416dd8318b162e4f21362b4c376fa10b0286855543a30d4b8d2f162c88756d69eb0d6da1540b74152f5588c7b42a4156a82a2c9660a40614c2bf15e0a7eda1949fff0b712a113d2860bd17309c2176ac2775c8ef2b29892a97bd4b570fd", 0x7b}, 0x68) 21:50:49 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140d, 0x100, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x302958e0dfdc2ebf}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 6) [ 1753.858929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1753.868112] 23816 total pagecache pages [ 1753.872146] 0 pages in swap cache [ 1753.875585] Swap cache stats: add 0, delete 0, find 0/0 [ 1753.880922] Free swap = 0kB [ 1753.883972] Total swap = 0kB [ 1753.886975] 2097051 pages RAM [ 1753.890055] 0 pages HighMem/MovableOnly [ 1753.894057] 363897 pages reserved [ 1753.897495] 0 pages cma reserved 21:50:49 executing program 4: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 1753.965050] FAULT_INJECTION: forcing a failure. [ 1753.965050] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.976900] CPU: 0 PID: 32164 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1753.984786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.994132] Call Trace: [ 1753.996720] dump_stack+0x1b2/0x281 [ 1754.000354] should_fail.cold+0x10a/0x149 [ 1754.004509] should_failslab+0xd6/0x130 [ 1754.008485] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1754.013157] bpf_prog_alloc+0x177/0x1e0 [ 1754.017169] bpf_prog_create_from_user+0x99/0x290 [ 1754.022007] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1754.027716] do_seccomp+0x31b/0x19c0 [ 1754.031419] ? wait_for_completion_io+0x10/0x10 [ 1754.036070] ? vfs_write+0x319/0x4d0 [ 1754.039768] ? __seccomp_filter+0xdd0/0xdd0 [ 1754.044078] ? SyS_write+0x14d/0x210 [ 1754.047780] ? SyS_read+0x210/0x210 [ 1754.051395] ? __do_page_fault+0x159/0xad0 [ 1754.055615] ? do_syscall_64+0x4c/0x640 [ 1754.059571] ? prctl_get_seccomp+0x50/0x50 [ 1754.063786] do_syscall_64+0x1d5/0x640 [ 1754.067661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1754.072832] RIP: 0033:0x7fe46ce7b0e9 [ 1754.076525] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1754.084215] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1754.091471] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1754.098722] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.105971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:50:49 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:49 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) 21:50:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 7) 21:50:49 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x3, 0x100000000000, 0x98}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) [ 1754.113223] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 [ 1754.123367] audit: type=1326 audit(1651355449.657:38): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x0 21:50:49 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140d, 0x100, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x302958e0dfdc2ebf}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140d, 0x100, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x302958e0dfdc2ebf}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) [ 1754.256186] FAULT_INJECTION: forcing a failure. [ 1754.256186] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.272251] CPU: 1 PID: 32190 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1754.280146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1754.289493] Call Trace: [ 1754.292063] dump_stack+0x1b2/0x281 [ 1754.295675] should_fail.cold+0x10a/0x149 [ 1754.299803] should_failslab+0xd6/0x130 [ 1754.303760] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1754.308408] bpf_prog_store_orig_filter+0x7b/0x1e0 [ 1754.313324] ? _copy_from_user+0x96/0x100 [ 1754.317456] bpf_prog_create_from_user+0x192/0x290 [ 1754.322373] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1754.328241] do_seccomp+0x31b/0x19c0 [ 1754.331937] ? wait_for_completion_io+0x10/0x10 [ 1754.336588] ? vfs_write+0x319/0x4d0 [ 1754.340283] ? __seccomp_filter+0xdd0/0xdd0 [ 1754.344790] ? SyS_write+0x14d/0x210 [ 1754.348483] ? SyS_read+0x210/0x210 [ 1754.352088] ? __do_page_fault+0x159/0xad0 [ 1754.356301] ? do_syscall_64+0x4c/0x640 [ 1754.360252] ? prctl_get_seccomp+0x50/0x50 [ 1754.364465] do_syscall_64+0x1d5/0x640 [ 1754.368338] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1754.373506] RIP: 0033:0x7fe46ce7b0e9 [ 1754.377200] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1754.384945] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1754.392194] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1754.399443] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.406706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.413952] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 21:50:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1, 0x9, 0xfffff000}) 21:50:50 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) (async) 21:50:50 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:50:50 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140d, 0x100, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x302958e0dfdc2ebf}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:50 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x3, 0x100000000000, 0x98}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) 21:50:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 8) 21:50:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x9, 0xfffffffa, 0xbd6, 0x34b, 0x5a51, 0x1}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)="96400a03272fba8cc2b68d1bc97bfedaadafda38aeda2770b4c4777fad7300cde480aa34bfaab3f709ff9b84c967ccc7b26fb69427f555c7376515ca79e26d0e75d2acaf6c934032f4d81034c717c5a4b08ce2ea59ae9c0260cc07a1f7b8d95695b7da65394963ac188f0849bd734f1a9be4ce49ebbc63d6f47ba0ca191d412aa5d991a88417fd12e46979d242ac6a8309ef5b9f87", 0x95, r0}, 0x68) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/249, 0xf9, 0x0, &(0x7f00000002c0)=""/61, 0x3d}}, 0x10) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil}) 21:50:50 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) 21:50:50 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x3, 0x100000000000, 0x98}) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) (rerun: 64) [ 1754.894140] audit: type=1326 audit(1651355450.427:39): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x0 [ 1754.918719] FAULT_INJECTION: forcing a failure. [ 1754.918719] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.938635] CPU: 0 PID: 32205 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1754.946531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1754.955893] Call Trace: [ 1754.958485] dump_stack+0x1b2/0x281 [ 1754.962113] should_fail.cold+0x10a/0x149 [ 1754.966265] should_failslab+0xd6/0x130 [ 1754.970251] __kmalloc_track_caller+0x2bc/0x400 [ 1754.974919] ? bpf_prog_store_orig_filter+0x103/0x1e0 [ 1754.980107] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1754.985124] kmemdup+0x23/0x50 [ 1754.988316] bpf_prog_store_orig_filter+0x103/0x1e0 21:50:50 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)="66c1622cfa1f2dbc02389aee8f21266365cf0bed54b16e4d7d13f23ccd0712677073c79b6d75c4adc51c125c9c74a147eb1d2754b4f1d7ae2b7dfbd7c389696d4536869c8146f3731cd73388360e57c20c15ca06c7e82f7d608830d0bfdedcd8fd0962c506541acb41a04e2b77c96dd26f0701a338677f1be93c86101e21715353f7aa67bd3e3895b556c19450aef79c12a031b3c9cc44836a6e496509c562397e2422df5f48c76cb6c44c77782c83f54285a2d36c1bf8ecd0618bb69bce6e46fbf36b767ec27c488117944617132859952483b870c6af93e35077ce3a67b1165a86304a1a9966eb8406780e6ad01ff6f4bdc26e2742c7b829ade9349f08b1936da1e5aa389ee0c3040ca787267b7e05df7ac605c57e605f00ac7cda687df5830d0ae4e265da43624696f80839c4524093c30cd80013ddbd21f5af6ee3a1659953a5055c7b076b1526d3d011fb5cabff7b58b43464f45bb3eb9b7ac7eedbc70aae02733f8cf1da0621c920b9d2bc174fe6ae7a66d0a20da2f4df7cbeadfbd7f06c4d8e862c90934908bed88a6a7ae026b0abd41aef469eaaed89c953e43144fbfa07a14fb90b9796f78f18c0df172842d2b917aeb60ea3fc3032f012242853526ab0f9e4b21c0e5f996a3c24a71c77a3847fdc5ec51cf962f30e5ff802300310d4be5188a877cdb2c1e4e452dc8672989b57652a4fda9005c57ea6e81cc370d500d7380b810c229f361bb5cc89924d02c3c848fe5693959ce45bc4fbde62936acbb63fc03f9c4ab55651b484c543fbba49c545e3081e2aa1cfff97e0a1e202c60baff6bb53f3f6b3aafa83c541fab42260649ad3fb3b01aca402d7e0f766eb11c1dd85af5492b15deb868a0ae8153f2cdabaf0c8f0fb3e581a1305eec0e42488c2ae49e7db9450d2bf073b19324e42c30d93a24378033fbfc604959b13d4e8265d37475561e2b9ba822112ff623bf35111c40e6937e888f81f2860d89fbbef264c357e1e03d0d9e59c7f5e68db92fbc3596c53324b3138f89b1f7b5b45186fca9b2ee79a9dfeb2aeb8b4a2afa7facd15b006711a55edfb37200b49ee173ebff1bdbd37c573174746c912f51f14a0b8b25ba3aba5277af8f200c2d2509bf7d949f62e3ec7c0d3dc16b378a2dc0f07bc298f4f6eaf86ee302d05cd20efeb765956417a0f5f7c6e0aafa8470d01b1c0d9f784ce1d1dfd1aac1f61942e23cdf28e22c4460fd272dcff06b84b89fd5c766cca8b87e34b2db4f1b10a6861f287de984d36bf9d55a2335d84ee131b3fb21225b74bce864afbb95272c86e761fba98e7966913f01e4ae3196592971591f7bed3637f126bac4abc95a556fce801da2945a25384039b5b12efa9c140e13295b60ad5d4c79b4ec11073cec5193d0b63b2826710e8f27fc2df7a40b674a9e6d6263f20757049d6e03ba99f38810786e0ebf5c71d52562a25ed84f2c739cb2805408192abd56bedd317147879ba241a4768f2236255875dc235d9925d3de67a6c129b5dc8d28c04e3b935cf241271a40d121791e7e0d7172753a1f111ea20fc755e0ff4ada6a55f390c74d02d4e2f29c52196d9cfbcd99e2920bae23b1660b8b61bf551eb0c4465660778e3617d47685ff0e13780cb4823e7776a4703bfec26368398e2127ba2a574cdd52c8485f3bd22b5d930674289da3df16cfd6c4c33b71a6fba48fa03e6ec594c90bd6869780df8e3d0954104c1c03efb1a812ce007d1161955205c444df496996a0abcc72fa117ba3fcc831eaf76e311e332d60032705aa67690fab32b6a83029f41454c0fbcbabe4c9d57bdc6aab89af62bc14a816ac1d33c078c2bbc8d13aee5a41b27126ae4f466cec729f36ebeadfdb0f7d722ffac422c4c8fb688d38efa2e75b1d8992c92dcdc378caf6d29039568ee83c7c2189eda28c89759fb2d04228bc1fc5bd8373b3450cdb2e46b187781533de2226d44ca7dd4f27c7a6200192213baa40d66fcaf9064eb8029d30438431d2b5b035956701c197186ef7acf1118a56f1524aed89d8fd9da5c22da1e147e7c7d749187a57dfbac5dfe845f87f5ea11ce919b6f01aaa8917e8e0ad658c858534809f266d48364ad5c1c254fef7430ad25e98dd38eafaf668bdff99aef28f41e591dd806e1b43c728a9b0968aa303583aba14c20ec08413cdfa3ebd1764e9c6831d85add077b8e22cbafc36910674e404d28aa4b5b930776908c90c7179f0357a7e5fc5aa721eec93b956278b47f317cc2c934e385b22faa3c3482364bb3093be5ea5abe6f52d2fc52a7d5864d65ac35a0708b4ea20394a2451aed84201a881553fbc883de78bdc6fba21ed23f308bf9ccf7063cb5adbca1374704d72436f3b470f88b87d30e4bee2cbe0c2eb7be6e12423ecda8676987ad01515e06a123b20ab65935212337ac8486810282142b884ea9cca4bb4cc614d57c1ad82389a7afcd4de4f253261da0fa7c8bd26f3c60413cb4c6505ac6c5649b2e2765483767de78b1e4d6b3091148927907829f0ebdfd21a2de119528978d6dd9cc24e4a69c9d33f0f7d4043a5bc38a37e38ad72ac2de5ad09b5167d5ea4c2364d07183a80c81cf6c2e2f7b6275e827d2d4d9845db00a0d146f149d726160bb4d5944d95cc6626452c3fca53d2c28bfa4ef60ecb94d524a8031f917792e9e6f540f6d7f3ee75cd7f6ebf2f51076409c2f71d67b97ce002d307b0d3368d2df8b8e25968c90ed2d3cf0a41905e9f8d90831edd0d7661e6569664991b71aafeb827adc2b36314c265d960a00e547429250455a4d8b0ac4ae740712326d5c57887a366bed1bf9957ec630cc3ae985ca9b0651f67cd83dacba6a725b4aee02b6818b7aa65fd7a8807e6c98b81fa7cae2ded5221da1345a4f0c4e8dd592af5099eb22ef9be2a0b48c397b963366b6132443eb6b5e2cabd990ae6bc48b67d6aee3ed421841bae3a083152763c20226ea3a98a840891f60f8d8baa6b9f902be2a11dc7407cc6ec9ad52cf632bed75f552afd3eb5657c1ef09924a0e059ee3e9ad7f69086390c1d63b56b58423da0f019307516a1f18797de68c27aa00a0374d8918ecd028bf38ed1b9b26a7122dd5b555579c1a21f09e4a0cc269ef0525879fb718a2163cb3241b8b70594a53c0080109edac3d294f62799cdd81c7ce2258a2e9dce4d76a33de6ea693d9016fcf9510e51a1e831c543e2d4b858e4bbd3608f096416cd24e56cea10f30612b63fde31efc4da4ae4a87d416951793c0ab656187115290e027812443570d5ac3a8c3f6b6e6fd1d72a4f11df7cc3cdae3473aefb27d27f9c0054381b653885dfb4fb6de8df34fdd6acdebb1f743e1bfcaedb41dc8eb4fd6c7cfa5d156c7d7506b8b90ad0bd072a3557c896c7c86aa7371423c829e8cdf1cadb87b3b688ba7c53a05daa21e447009a1eced67eb9919b086207542e5ecdf2ab53a909b218a685c94d82f1c99c37140bfa50143969e26a83a1626cb4716b512e97466c9fa116e27bcb202cac4cce0d847069ca0dd68ddbbd97c4dd8812fa85d014d97cea160f9b578b2c01869192978134941ae763da6c00a7c7d03fee3c4a6aca9b2e1ce1a78c17fefd73cf1e870499dbf1e2e35bf7499c775f4b4fecde8d01f8a76bd0663bc7529cbab4aa8c9a3a3d53a740d2e07068161d5da30530e6e7753dd920c178c4a030aaf8223747d182e4bb6821cbe630ef3cf569aa4e04474db57112dc25977c14e58830d5ce8abca25f8e571d92ba6d326de411e3ffda5bb9592f15e2a2008c0260aa5a8f396c3d0ca880be52714f8391289c56cb1510132b222e3a6d1086faf411448229b2d1f85876a3e5af194f9440e158ddaed46aba0e6478c13caf1e86e89d4278c1b1df6eaa169403655d38c5b7c2d5b96eb774435e83bd7c773dc341e62deb48b4e6b8880137c19c615b52e88a3b519ea0ea18105faa0d2812fca11634dd237523258557fdfc79d48fded918468c7a47777f30a8b878651e439b9a519bfec887df6beeb7a26fa6eedef5ae3e483434c234e3385ad7b0e0819e3b3c2e107f1306bea166d2cf294a81cbf579c1b96c041b872bab6e9eb7da185232cefc43956cc39b8a12ee92325dee64358710a82f9bde4946e3a3baa4c7909b531380097cea138d426fbc22d3a830f55f65de3a36e44955b71bebc90d0cc8d9b7a9d56346140a3faa4a0de9c800d949e14ea2f792ec966eb867cf54c571010b1b86b49af9aa53be6beb94ff562d1f890509c5cdfcc11aa2ba8fc139759e57c9ee17a51958207feb42fe84dd6d5293fb30cf5e4a48254f6713b4bb3364d0db5e79f1d8a1d7be53583d113c1c59fa11617cef0ba9e64f8029a490e6869532e67420f5cb8411bc96f3b43d4e2d28d23f2c2a29760f33b3a60fe2566497b73913d8f4f53995d3604648d675cfdc1c44fb78f205982ec846f3469ceda14d99c4789eadad05d9b85987da95b2b0086aa9bcfbae2a1888cae4b81378689ff08ae9b9ceca614e6344da5078d5d11de10e5c18738bc37ba616ca8d18be29573160bcc9026e24160ee53f06809d98aec074753e94cff8990258bfbe4843f197b36adadd0ee15d63887fd3c254e9650a1ee32c9ea3c578c9128f1b8e5398b794fe1e7c1fb199811c26685750440ee79c79ba33e0c90961b8cdb5aefb94fb6629b70b97bfb4723bb37f9eda4ef2490c0d21e75a7fe49e1e32ca0aa56d37c2f72f90951b26c07003c7a8ec6f1141f9134afd2aa89843acf6ad9e69cb1b4e78079bc1eaa5596cef6c0f93fa7c789cc87a679c6953aa6f2bdd8f64e772012050e6d579e94457f81a183a65523d7a18cbe4db9dc76e444777c5f392440fc0f71b3e6b286d88fd5895ffc6175152c413f2300aff9779b8af6d08b97298071f33b130b8cec19fea43afa9e3fac92d793e7f90f8707bf278ce7c3fed7212f0b6323c0c27569a9cc76153bc4c3e6f2c5b486b2293da11593f1285f20593244e2d09489d2fbee683b7e1b75582360c9298c0b344ea78965f617f2767cb430ab1ad176feaa0a986730da872eed4fee1bfdea5ef095fe1c7e4e191032533565c2539076a1860d2a2e8559b7b52b93c645e53c91357e675cda4a42bda35d1c479f711cbd1ca4cb09b7262866b521ff5bed9a66e4d0ce4f9247ea08a2c4db657c939e39c4173bdcc7d34a22450f48f57233aca3e419d033f640ab5d4d725b220b4d2671eb9a26b70d0add2754d435a054eeaf38534596b940aaca517820c0ef9daf752b67a66c7c238ab42ada4a69e9cd2de5fe5b9810cd503bd08ec4937c8ac41bc64161c20de8244e481266b821995db9acb5be4ec0492005798759b7c450723174fc3a10b132eb3cb17f973c4554a6d84c6f2ea567e3e0afef733b5230ba90089bb56ea0a764b255f61df933d76a08211324aa01ebb251eb507cd910bf13dbea008129776ccbacc94e3c2fe66bda32a2e8a226c742743ff419c2b0434753857e2b1ec80a84604f1dd664dbce66c4a2bca4b20b36e43f6f48c4b7bf8142fc5a4ba7ea1c466b3e090d43322c5dfbd4522183c2c985ea59516fd29303293ce8a0c80728d35612d985a8acb35d8aede9e9fc6246021f4af861978f18f6bead1b3d06a297b8cc02b46495409947391aff96643842b20d2032115e30a6e8b341b860ed40eb0dc9efaf6196bb5230483ad1ae9bbd53ffaf7cea5f0993c08fc6f245da59c91e69a5014722afdb02e755183a659e73b4203bc0aaa986c7a85023d46fd518cc8783393253fcdf54296ed991dc4d689c83af7e28af24dae1dde0f80bf899138537e46c77555c1e62", 0x1000}, 0x68) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000001140), 0x2, 0x80180) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000001180)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000011c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, r2, r3], 0x5}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SIOCRSACCEPT(r0, 0x89e3) [ 1754.993341] ? _copy_from_user+0x96/0x100 [ 1754.997495] bpf_prog_create_from_user+0x192/0x290 [ 1755.002420] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1755.008140] do_seccomp+0x31b/0x19c0 [ 1755.011853] ? wait_for_completion_io+0x10/0x10 [ 1755.016517] ? vfs_write+0x319/0x4d0 [ 1755.020225] ? __seccomp_filter+0xdd0/0xdd0 [ 1755.024550] ? SyS_write+0x14d/0x210 [ 1755.028267] ? SyS_read+0x210/0x210 [ 1755.031893] ? __do_page_fault+0x159/0xad0 [ 1755.036127] ? do_syscall_64+0x4c/0x640 [ 1755.040097] ? prctl_get_seccomp+0x50/0x50 [ 1755.044332] do_syscall_64+0x1d5/0x640 [ 1755.048224] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1755.053407] RIP: 0033:0x7fe46ce7b0e9 [ 1755.057110] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1755.064815] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1755.072089] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1755.079357] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.086641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:50:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async, rerun: 32) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x9, 0xfffffffa, 0xbd6, 0x34b, 0x5a51, 0x1}) (async, rerun: 32) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)="96400a03272fba8cc2b68d1bc97bfedaadafda38aeda2770b4c4777fad7300cde480aa34bfaab3f709ff9b84c967ccc7b26fb69427f555c7376515ca79e26d0e75d2acaf6c934032f4d81034c717c5a4b08ce2ea59ae9c0260cc07a1f7b8d95695b7da65394963ac188f0849bd734f1a9be4ce49ebbc63d6f47ba0ca191d412aa5d991a88417fd12e46979d242ac6a8309ef5b9f87", 0x95, r0}, 0x68) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/249, 0xf9, 0x0, &(0x7f00000002c0)=""/61, 0x3d}}, 0x10) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil}) 21:50:50 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 1755.093909] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 21:50:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1, 0x9, 0xfffff000}) 21:50:51 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)="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", 0x1000}, 0x68) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000001140), 0x2, 0x80180) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000001180)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000011c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, r2, r3], 0x5}) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$SIOCRSACCEPT(r0, 0x89e3) 21:50:51 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {0x0, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x9}) 21:50:51 executing program 5: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/136, &(0x7f00000000c0)=0x88) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 21:50:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 9) 21:50:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x9, 0xfffffffa, 0xbd6, 0x34b, 0x5a51, 0x1}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)="96400a03272fba8cc2b68d1bc97bfedaadafda38aeda2770b4c4777fad7300cde480aa34bfaab3f709ff9b84c967ccc7b26fb69427f555c7376515ca79e26d0e75d2acaf6c934032f4d81034c717c5a4b08ce2ea59ae9c0260cc07a1f7b8d95695b7da65394963ac188f0849bd734f1a9be4ce49ebbc63d6f47ba0ca191d412aa5d991a88417fd12e46979d242ac6a8309ef5b9f87", 0x95, r0}, 0x68) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/249, 0xf9, 0x0, &(0x7f00000002c0)=""/61, 0x3d}}, 0x10) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil}) 21:50:51 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {0x0, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x9}) 21:50:51 executing program 0: shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) 21:50:51 executing program 5: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/136, &(0x7f00000000c0)=0x88) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 21:50:51 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {0x0, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {0x0, 0x2}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x9}) (async) 21:50:51 executing program 0: shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) [ 1755.839034] FAULT_INJECTION: forcing a failure. [ 1755.839034] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.858735] audit: type=1326 audit(1651355451.387:40): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x0 [ 1755.905736] CPU: 1 PID: 32248 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1755.913637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1755.922990] Call Trace: [ 1755.925589] dump_stack+0x1b2/0x281 [ 1755.929225] should_fail.cold+0x10a/0x149 [ 1755.933374] should_failslab+0xd6/0x130 [ 1755.937345] __kmalloc+0x2c1/0x400 [ 1755.940891] ? bpf_check_classic+0x346/0x6f0 [ 1755.945302] bpf_check_classic+0x346/0x6f0 [ 1755.949535] ? memcpy+0x35/0x50 21:50:51 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)="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", 0x1000}, 0x68) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000001140), 0x2, 0x80180) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000001180)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000011c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, r2, r3], 0x5}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$SIOCRSACCEPT(r0, 0x89e3) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)="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", 0x1000}, 0x68) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000001140), 0x2, 0x80180) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000001180)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000011c0)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, r2, r3], 0x5}) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) ioctl$SIOCRSACCEPT(r0, 0x89e3) (async) [ 1755.952809] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1755.958519] bpf_prepare_filter+0x9f/0x320 [ 1755.962755] bpf_prog_create_from_user+0x1a7/0x290 [ 1755.967680] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1755.973388] do_seccomp+0x31b/0x19c0 [ 1755.977101] ? wait_for_completion_io+0x10/0x10 [ 1755.981767] ? vfs_write+0x319/0x4d0 [ 1755.985490] ? __seccomp_filter+0xdd0/0xdd0 [ 1755.989808] ? SyS_write+0x14d/0x210 [ 1755.993520] ? SyS_read+0x210/0x210 [ 1755.997144] ? __do_page_fault+0x159/0xad0 [ 1756.001375] ? do_syscall_64+0x4c/0x640 [ 1756.005346] ? prctl_get_seccomp+0x50/0x50 [ 1756.009582] do_syscall_64+0x1d5/0x640 [ 1756.013470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1756.018654] RIP: 0033:0x7fe46ce7b0e9 [ 1756.022356] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1756.030059] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1756.037322] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1756.044575] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.051831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.059079] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 21:50:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x399, 0xd1, 0x0, 0x9}, {0x2, 0x80, 0x7f, 0x8}, {0xfff, 0x65, 0x3f, 0x8fd}, {0x9, 0x7, 0xff, 0x2}]}) 21:50:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x4}, {}]}) 21:50:52 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="9c49211aee1ddefa0816620ffdbd1a6ca871e79235d5ac07fc9a750326d714e12ab53d37fb0d768955eddf04e31e49bd696b78a3c63fb3e9d7f54f461ec174081d04c035f57b8fb048cdd11cfb576df4", 0x50, r0}, 0x68) 21:50:52 executing program 0: shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) (async) 21:50:52 executing program 5: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/136, &(0x7f00000000c0)=0x88) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 21:50:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 10) 21:50:52 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x62b86a285a25a547, &(0x7f0000ffc000/0x3000)=nil) r0 = userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) [ 1756.741281] FAULT_INJECTION: forcing a failure. [ 1756.741281] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.764325] CPU: 0 PID: 32289 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1756.772217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1756.781569] Call Trace: [ 1756.784157] dump_stack+0x1b2/0x281 [ 1756.787794] should_fail.cold+0x10a/0x149 [ 1756.791942] should_failslab+0xd6/0x130 [ 1756.795911] __kmalloc_track_caller+0x2bc/0x400 [ 1756.800576] ? bpf_migrate_filter+0x8e/0x2d0 [ 1756.804987] kmemdup+0x23/0x50 [ 1756.808176] bpf_migrate_filter+0x8e/0x2d0 [ 1756.812411] ? __sk_attach_prog+0x360/0x360 [ 1756.816727] ? bpf_check_classic+0x15c/0x6f0 [ 1756.821257] ? seccomp_check_filter+0xba/0x170 [ 1756.825832] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1756.831564] bpf_prepare_filter+0x14c/0x320 [ 1756.835882] bpf_prog_create_from_user+0x1a7/0x290 21:50:52 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x62b86a285a25a547, &(0x7f0000ffc000/0x3000)=nil) r0 = userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 21:50:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x399, 0xd1, 0x0, 0x9}, {0x2, 0x80, 0x7f, 0x8}, {0xfff, 0x65, 0x3f, 0x8fd}, {0x9, 0x7, 0xff, 0x2}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x399, 0xd1, 0x0, 0x9}, {0x2, 0x80, 0x7f, 0x8}, {0xfff, 0x65, 0x3f, 0x8fd}, {0x9, 0x7, 0xff, 0x2}]}) (async) 21:50:52 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffb000/0x4000)=nil) (async) shmget$private(0x0, 0x3000, 0x62b86a285a25a547, &(0x7f0000ffc000/0x3000)=nil) (async) r0 = userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) [ 1756.840807] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1756.846511] do_seccomp+0x31b/0x19c0 [ 1756.850238] ? wait_for_completion_io+0x10/0x10 [ 1756.854905] ? vfs_write+0x319/0x4d0 [ 1756.858615] ? __seccomp_filter+0xdd0/0xdd0 [ 1756.862932] ? SyS_write+0x14d/0x210 [ 1756.866643] ? SyS_read+0x210/0x210 [ 1756.870266] ? __do_page_fault+0x159/0xad0 [ 1756.874496] ? do_syscall_64+0x4c/0x640 [ 1756.878464] ? prctl_get_seccomp+0x50/0x50 [ 1756.882694] do_syscall_64+0x1d5/0x640 [ 1756.886582] entry_SYSCALL_64_after_hwframe+0x46/0xbb 21:50:52 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xff, 0x9, 0x0, 0x4, 0x0, 0x9378, 0x20001, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d1, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x6080, 0x7f, 0x9, 0x0, 0x5, 0xd1, 0x1, 0x0, 0x7f, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0xfffffffffffffffa) r1 = gettid() r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xde25fa6329df4be8, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0xff, 0x7f, 0xff, 0x0, 0xffffffff80000000, 0x4000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x1, 0x382}, 0x200, 0x5919, 0x1, 0x1, 0xff, 0x1, 0x6, 0x0, 0x1, 0x0, 0x1}, r1, 0xa, r2, 0x8) 21:50:52 executing program 0: ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x401) r0 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:52 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="9c49211aee1ddefa0816620ffdbd1a6ca871e79235d5ac07fc9a750326d714e12ab53d37fb0d768955eddf04e31e49bd696b78a3c63fb3e9d7f54f461ec174081d04c035f57b8fb048cdd11cfb576df4", 0x50, r0}, 0x68) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4000}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="9c49211aee1ddefa0816620ffdbd1a6ca871e79235d5ac07fc9a750326d714e12ab53d37fb0d768955eddf04e31e49bd696b78a3c63fb3e9d7f54f461ec174081d04c035f57b8fb048cdd11cfb576df4", 0x50, r0}, 0x68) (async) 21:50:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x4}, {}]}) 21:50:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x399, 0xd1, 0x0, 0x9}, {0x2, 0x80, 0x7f, 0x8}, {0xfff, 0x65, 0x3f, 0x8fd}, {0x9, 0x7, 0xff, 0x2}]}) 21:50:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 11) [ 1756.891765] RIP: 0033:0x7fe46ce7b0e9 [ 1756.895465] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1756.903167] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1756.910427] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1756.917689] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.924955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.932217] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 21:50:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5, 0x4}, {}]}) 21:50:52 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xff, 0x9, 0x0, 0x4, 0x0, 0x9378, 0x20001, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d1, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x6080, 0x7f, 0x9, 0x0, 0x5, 0xd1, 0x1, 0x0, 0x7f, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0xfffffffffffffffa) r1 = gettid() r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xde25fa6329df4be8, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0xff, 0x7f, 0xff, 0x0, 0xffffffff80000000, 0x4000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x1, 0x382}, 0x200, 0x5919, 0x1, 0x1, 0xff, 0x1, 0x6, 0x0, 0x1, 0x0, 0x1}, r1, 0xa, r2, 0x8) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xff, 0x9, 0x0, 0x4, 0x0, 0x9378, 0x20001, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d1, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x6080, 0x7f, 0x9, 0x0, 0x5, 0xd1, 0x1, 0x0, 0x7f, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) (async) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0xfffffffffffffffa) (async) gettid() (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xde25fa6329df4be8, 0x0) (async) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0xff, 0x7f, 0xff, 0x0, 0xffffffff80000000, 0x4000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x1, 0x382}, 0x200, 0x5919, 0x1, 0x1, 0xff, 0x1, 0x6, 0x0, 0x1, 0x0, 0x1}, r1, 0xa, r2, 0x8) (async) 21:50:52 executing program 0: ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x401) (async, rerun: 32) r0 = userfaultfd(0x1) (rerun: 32) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) 21:50:52 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x280200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async, rerun: 32) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4000}) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="9c49211aee1ddefa0816620ffdbd1a6ca871e79235d5ac07fc9a750326d714e12ab53d37fb0d768955eddf04e31e49bd696b78a3c63fb3e9d7f54f461ec174081d04c035f57b8fb048cdd11cfb576df4", 0x50, r0}, 0x68) 21:50:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0xffd, 0x7f, 0x35, 0xfffffffe}]}) [ 1757.067323] FAULT_INJECTION: forcing a failure. [ 1757.067323] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.115668] CPU: 0 PID: 32324 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1757.123568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.132915] Call Trace: [ 1757.135503] dump_stack+0x1b2/0x281 [ 1757.139135] should_fail.cold+0x10a/0x149 [ 1757.143282] should_failslab+0xd6/0x130 [ 1757.147253] __kmalloc+0x2c1/0x400 [ 1757.150786] ? bpf_convert_filter+0xc2/0x1a50 [ 1757.155282] bpf_convert_filter+0xc2/0x1a50 [ 1757.159609] ? bpf_prog_store_orig_filter+0x1e0/0x1e0 21:50:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0xffd, 0x7f, 0x35, 0xfffffffe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0xffd, 0x7f, 0x35, 0xfffffffe}]}) (async) [ 1757.164842] ? bpf_prog_realloc+0x6b/0x2d0 [ 1757.169083] bpf_migrate_filter+0x224/0x2d0 [ 1757.173402] ? __sk_attach_prog+0x360/0x360 [ 1757.177729] ? seccomp_check_filter+0xba/0x170 [ 1757.182305] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1757.188024] bpf_prepare_filter+0x14c/0x320 [ 1757.192363] bpf_prog_create_from_user+0x1a7/0x290 [ 1757.197286] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1757.202996] do_seccomp+0x31b/0x19c0 [ 1757.206709] ? wait_for_completion_io+0x10/0x10 [ 1757.211382] ? vfs_write+0x319/0x4d0 21:50:52 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xff, 0x9, 0x0, 0x4, 0x0, 0x9378, 0x20001, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d1, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x6080, 0x7f, 0x9, 0x0, 0x5, 0xd1, 0x1, 0x0, 0x7f, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0xfffffffffffffffa) r1 = gettid() r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xde25fa6329df4be8, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0xff, 0x7f, 0xff, 0x0, 0xffffffff80000000, 0x4000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x1, 0x382}, 0x200, 0x5919, 0x1, 0x1, 0xff, 0x1, 0x6, 0x0, 0x1, 0x0, 0x1}, r1, 0xa, r2, 0x8) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xff, 0x9, 0x0, 0x4, 0x0, 0x9378, 0x20001, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d1, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x6080, 0x7f, 0x9, 0x0, 0x5, 0xd1, 0x1, 0x0, 0x7f, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) (async) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0xfffffffffffffffa) (async) gettid() (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xde25fa6329df4be8, 0x0) (async) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0xff, 0x7f, 0xff, 0x0, 0xffffffff80000000, 0x4000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x1, 0x382}, 0x200, 0x5919, 0x1, 0x1, 0xff, 0x1, 0x6, 0x0, 0x1, 0x0, 0x1}, r1, 0xa, r2, 0x8) (async) 21:50:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0xffd, 0x7f, 0x35, 0xfffffffe}]}) [ 1757.215090] ? __seccomp_filter+0xdd0/0xdd0 [ 1757.219405] ? SyS_write+0x14d/0x210 [ 1757.223117] ? SyS_read+0x210/0x210 [ 1757.226746] ? __do_page_fault+0x159/0xad0 [ 1757.230975] ? do_syscall_64+0x4c/0x640 [ 1757.234943] ? prctl_get_seccomp+0x50/0x50 [ 1757.239190] do_syscall_64+0x1d5/0x640 [ 1757.243088] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1757.248269] RIP: 0033:0x7fe46ce7b0e9 [ 1757.251969] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d 21:50:52 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1412, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x804) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@hyper}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) 21:50:52 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) userfaultfd(0x800) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x41a042, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005) 21:50:52 executing program 0: ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x401) r0 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x401) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async) shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) (async) 21:50:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) (fail_nth: 12) 21:50:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x717}, {0xb0d1, 0x0, 0x0, 0xfffffffd}]}) [ 1757.259686] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1757.266951] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1757.274214] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.281475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1757.288735] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 21:50:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000640), 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3}]}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) 21:50:52 executing program 5: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1412, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x804) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@hyper}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1412, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x804) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@hyper}) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) (async) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) (async) 21:50:52 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) userfaultfd(0x800) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x41a042, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005) 21:50:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x717}, {0xb0d1, 0x0, 0x0, 0xfffffffd}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x717}, {0xb0d1, 0x0, 0x0, 0xfffffffd}]}) (async) 21:50:52 executing program 0: shmget$private(0x0, 0x3000, 0x1808, &(0x7f0000ffd000/0x3000)=nil) [ 1757.435873] FAULT_INJECTION: forcing a failure. [ 1757.435873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1757.475675] audit: type=1326 audit(1651355453.007:41): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32371 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6b8e20e9 code=0x0 [ 1757.477415] CPU: 1 PID: 32380 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1757.503849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.513204] Call Trace: [ 1757.515795] dump_stack+0x1b2/0x281 [ 1757.519427] should_fail.cold+0x10a/0x149 [ 1757.523577] __alloc_pages_nodemask+0x22c/0x2720 [ 1757.528347] ? register_lock_class+0x1d0/0x1180 [ 1757.533013] ? lock_downgrade+0x660/0x740 [ 1757.537166] ? trace_hardirqs_on+0x10/0x10 [ 1757.541401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1757.546251] ? __change_page_attr_set_clr+0x316/0x2280 [ 1757.551531] ? lock_acquire+0x170/0x3f0 [ 1757.555500] ? lock_downgrade+0x740/0x740 [ 1757.559646] alloc_pages_current+0x155/0x260 [ 1757.564044] ? do_raw_spin_unlock+0x164/0x220 [ 1757.568535] __change_page_attr_set_clr+0x322/0x2280 [ 1757.573647] ? slow_virt_to_phys+0x300/0x300 [ 1757.578062] ? mark_held_locks+0xa6/0xf0 [ 1757.582119] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1757.587228] ? __change_page_attr_set_clr+0x1952/0x2280 [ 1757.592589] ? lock_acquire+0x170/0x3f0 [ 1757.596588] ? lock_downgrade+0x740/0x740 [ 1757.600736] __change_page_attr_set_clr+0x1a45/0x2280 [ 1757.605933] ? slow_virt_to_phys+0x300/0x300 [ 1757.610342] ? __mutex_unlock_slowpath+0x75/0x770 [ 1757.615185] ? wait_for_completion_io+0x10/0x10 [ 1757.619851] ? vm_unmap_aliases+0x3a5/0x460 [ 1757.624181] change_page_attr_set_clr+0x2a2/0xa30 [ 1757.629025] ? __change_page_attr_set_clr+0x2280/0x2280 [ 1757.634387] ? debug_object_activate+0x490/0x490 [ 1757.639153] ? kfree+0x14a/0x250 [ 1757.642519] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1757.647538] set_memory_ro+0x68/0x80 [ 1757.651249] ? _set_memory_wb+0x80/0x80 [ 1757.655226] ? __bpf_prog_run64+0xb0/0xb0 [ 1757.659371] bpf_prog_select_runtime+0x143/0x4e0 [ 1757.664127] bpf_migrate_filter+0x242/0x2d0 [ 1757.668449] ? __sk_attach_prog+0x360/0x360 [ 1757.672770] ? seccomp_check_filter+0xba/0x170 [ 1757.677346] ? hardlockup_detector_perf_cleanup+0x180/0x180 21:50:53 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) userfaultfd(0x800) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x41a042, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005) 21:50:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x717}, {0xb0d1, 0x0, 0x0, 0xfffffffd}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x717}, {0xb0d1, 0x0, 0x0, 0xfffffffd}]}) (async) 21:50:53 executing program 4: clock_getres(0x6, &(0x7f0000000040)) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 21:50:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x5}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x7, 0x81, 0xda, 0x1}, {0x800, 0x8, 0x9, 0xc2480000}, {0x0, 0x9, 0x3, 0x403}, {0x2f, 0x4, 0x0, 0x6}, {0x3, 0xc8, 0x7, 0x3}]}) 21:50:53 executing program 4: clock_getres(0x6, &(0x7f0000000040)) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) clock_getres(0x6, &(0x7f0000000040)) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) [ 1757.683056] bpf_prepare_filter+0x14c/0x320 [ 1757.687377] bpf_prog_create_from_user+0x1a7/0x290 [ 1757.692307] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1757.698015] do_seccomp+0x31b/0x19c0 [ 1757.701728] ? wait_for_completion_io+0x10/0x10 [ 1757.706393] ? vfs_write+0x319/0x4d0 [ 1757.710102] ? __seccomp_filter+0xdd0/0xdd0 [ 1757.714440] ? SyS_write+0x14d/0x210 [ 1757.718153] ? SyS_read+0x210/0x210 [ 1757.721778] ? __do_page_fault+0x159/0xad0 [ 1757.726012] ? do_syscall_64+0x4c/0x640 [ 1757.729982] ? prctl_get_seccomp+0x50/0x50 [ 1757.734215] do_syscall_64+0x1d5/0x640 [ 1757.738108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1757.743293] RIP: 0033:0x7fe46ce7b0e9 [ 1757.746999] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1757.754702] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1757.761959] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1757.769207] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.776466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1757.783711] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 [ 1757.792430] ------------[ cut here ]------------ [ 1757.797196] WARNING: CPU: 1 PID: 32380 at include/linux/filter.h:612 bpf_prog_select_runtime+0x3f1/0x4e0 [ 1757.806809] Kernel panic - not syncing: panic_on_warn set ... [ 1757.806809] [ 1757.814165] CPU: 1 PID: 32380 Comm: syz-executor.2 Not tainted 4.14.277-syzkaller #0 [ 1757.822033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.831376] Call Trace: [ 1757.833964] dump_stack+0x1b2/0x281 [ 1757.837583] panic+0x1f9/0x42d [ 1757.840757] ? add_taint.cold+0x16/0x16 [ 1757.844718] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 1757.849628] ? __warn.cold+0x5/0x44 [ 1757.853236] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 1757.858151] __warn.cold+0x20/0x44 [ 1757.861670] ? ist_end_non_atomic+0x10/0x10 [ 1757.865995] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 1757.870902] report_bug+0x208/0x250 [ 1757.874512] do_error_trap+0x195/0x2d0 [ 1757.878378] ? math_error+0x2d0/0x2d0 [ 1757.882161] ? __change_page_attr_set_clr+0x2280/0x2280 [ 1757.887501] ? debug_object_activate+0x490/0x490 [ 1757.892240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1757.897072] invalid_op+0x1b/0x40 [ 1757.900517] RIP: 0010:bpf_prog_select_runtime+0x3f1/0x4e0 [ 1757.906033] RSP: 0018:ffff88807f35fc88 EFLAGS: 00010246 [ 1757.911374] RAX: 0000000000040000 RBX: ffffffff815eb880 RCX: ffffc900072b9000 [ 1757.918622] RDX: 0000000000040000 RSI: ffffffff815e52b1 RDI: 0000000000000001 [ 1757.925879] RBP: ffffc9000b21a000 R08: ffffffff8b9d64d0 R09: 0000000000000000 [ 1757.933214] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809af3ec40 [ 1757.940464] R13: ffffc9000b21a000 R14: ffff88807f35fd38 R15: ffffc9000b21a000 [ 1757.947725] ? __bpf_prog_run64+0xb0/0xb0 [ 1757.951862] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 1757.956776] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 1757.961692] bpf_migrate_filter+0x242/0x2d0 [ 1757.965994] ? __sk_attach_prog+0x360/0x360 [ 1757.970300] ? seccomp_check_filter+0xba/0x170 [ 1757.974870] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1757.980563] bpf_prepare_filter+0x14c/0x320 [ 1757.984872] bpf_prog_create_from_user+0x1a7/0x290 [ 1757.989782] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1757.995472] do_seccomp+0x31b/0x19c0 [ 1757.999169] ? wait_for_completion_io+0x10/0x10 [ 1758.003824] ? vfs_write+0x319/0x4d0 [ 1758.007518] ? __seccomp_filter+0xdd0/0xdd0 [ 1758.011820] ? SyS_write+0x14d/0x210 [ 1758.015515] ? SyS_read+0x210/0x210 [ 1758.019127] ? __do_page_fault+0x159/0xad0 [ 1758.023346] ? do_syscall_64+0x4c/0x640 [ 1758.027306] ? prctl_get_seccomp+0x50/0x50 [ 1758.031523] do_syscall_64+0x1d5/0x640 [ 1758.035397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1758.040572] RIP: 0033:0x7fe46ce7b0e9 [ 1758.044263] RSP: 002b:00007fe46b7f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1758.051950] RAX: ffffffffffffffda RBX: 00007fe46cf8df60 RCX: 00007fe46ce7b0e9 [ 1758.059205] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 1758.066459] RBP: 00007fe46b7f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.073859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.081123] R13: 00007ffd512ffd4f R14: 00007fe46b7f0300 R15: 0000000000022000 [ 1758.088662] Kernel Offset: disabled [ 1758.092285] Rebooting in 86400 seconds..