88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:27 executing program 5: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) getsockname$netrom(r3, &(0x7f0000000200)={{0x3, @null}, [@null, @default, @default, @netrom, @null, @null, @default, @rose]}, &(0x7f0000000280)=0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}]}, 0x28}}, 0x40) r6 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x2, 0xc600) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000300)={&(0x7f0000ffa000/0x4000)=nil, 0x7, 0x0, 0x6}) 02:59:27 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null, 0x4}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') recvmsg(r0, &(0x7f0000000100)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/157, 0x9d}, {&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/109, 0x6d}], 0x7, &(0x7f0000000080)=""/44, 0x2c}, 0x40) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae00003cd82d2075e59fd92e000006dfaacb6fdbc661b2700080d69c66db1c183ecfeb84a62b2055510000"], 0x2c}}, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 02:59:28 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 02:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 02:59:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x80]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x82c]}]}, 0x84}, 0x1, 0x0, 0x0, 0x88}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7f, 0x84, 0x6, 0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0x8, 0x8000, 0xffffffff, 0xffffffff]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x400, 0x48, 0x80, 0x1]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x8, 0x8, 0xfffffff8, 0x80000000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8001, 0xc6, 0x2, 0xd0c]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8de, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 02:59:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x31a3bc288fd3ef01) 02:59:28 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0100000000000002000003000000"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x40800, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00042abd70b189dbdf2508004000"], 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x41) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x94594af431eee41d}, 0x4000040) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x10, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004814}, 0x1) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x294, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}]}, 0x294}}, 0x20000040) 02:59:28 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000f40005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) r2 = socket(0x4, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000003700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003900)={&(0x7f0000000180)={0x1c4, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x80000000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x48c}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xffffffffffffff8b}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc, 0x8f, 0x6000}, {0xc, 0x90, 0x8001}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000090) 02:59:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0x1, 0x8000, 0x0, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x18010}, 0x44011) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x34}}, 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) move_pages(0x0, 0x2, &(0x7f0000002040)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f00000020c0), 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4ada}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0xff}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x6, 0x5}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) 02:59:28 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff33, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x200000d9}, 0x0) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1b0, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}]}, 0x1b0}}, 0x20000040) 02:59:28 executing program 0: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x7b8c927313b0aebf}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 02:59:28 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x40, 0x20, 0xfffffff9, 0x7, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x66, 0x0, 0x1f, 0x2d, 0x0, @remote, @empty, {[@noop, @noop, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl1\x00', r3, 0x4, 0x7, 0xff, 0xa9, 0x6, @loopback, @empty, 0x8000, 0x700, 0x8000, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x30, 0x7, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x7, 0x10, 0x300, 0x1}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x10c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')!!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8bf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0x48, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x39, 0x5, "54a93a5b7a88a1a0815cfd5caa4cf26fd4eb71e29dbc713f9635eda2ed6f6132fe02a286e79e48be0293f81bf1efe32dff5d6f07d7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3f}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48000}, 0x50) 02:59:28 executing program 0: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x118, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}]}, 0x118}}, 0x20000040) 02:59:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x50000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r2, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) 02:59:28 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000e6fdf997d79db4f99ba955a62f021004200c", @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf250800000014000500ff020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80d8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000200)=0x9, 0x4) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:28 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 0: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:28 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="05", @ANYRES16=r0, @ANYBLOB="66a191aff37a4c46b3e2f3400829008dad5f48d71a2f43391094328a396e6d27a3a7bde8aac8216791a27e7a30a36f566b102dfa5b2cfd1250a91b19a591ae79b99b66637e0d626a131585fb4f22bea1057bbd43a6718abd0d278b4534a07bde5d0146d88f5c7b5e735630d092977360ed09dbcd62"], 0x14}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000001640)={&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/26, 0x1a}], 0x8, &(0x7f0000001580)=""/154, 0x9a}, 0x40000000) 02:59:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000140", @ANYRES16=r1, @ANYBLOB="200026bd70000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000100)={{{0x1, 0x1}}, 0x2a, 0x101, &(0x7f0000000080)="37cb25a69d64ceb0d421db5d1003a17bfe7679ca6bddcfbe64613d816e3b177c5c80b2470a5054c41053"}) 02:59:28 executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:28 executing program 5: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 4: accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:28 executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:28 executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0x0, r3, {0x6}}, 0x18) 02:59:28 executing program 5: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:28 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:28 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', @ifru_ivalue}) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xf7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}}, 0x0) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:28 executing program 5: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:28 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4c}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000001}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x5, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4040001) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfa}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x89}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00@\b', @ANYRES16=r4, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) 02:59:28 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = socket(0x2c, 0xa, 0xa23) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000200)={0x6, 0x1, "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"}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x200]}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x4000) 02:59:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:28 executing program 5: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:28 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae00000000000000000173faf5090005000000000000000100ff0100000000080000000000000000011cfd060000000000"], 0x2c}}, 0x0) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{}, [@bcast, @rose, @netrom, @bcast, @null, @rose, @null, @default]}, &(0x7f0000000100)=0x48, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/125, 0x7d}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001400)=""/116, 0x74}, 0x121) accept4$netrom(r3, &(0x7f0000000180)={{0x3, @rose}, [@default, @bcast, @remote, @netrom, @bcast, @null, @netrom, @rose]}, &(0x7f00000014c0)=0x48, 0x0) accept4$netrom(r2, &(0x7f0000001500)={{}, [@netrom, @null, @netrom, @null, @netrom, @remote, @bcast, @netrom]}, &(0x7f0000001580)=0x48, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000001640)={0x18}, 0x18) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) getpeername$netrom(r4, &(0x7f00000015c0)={{0x3, @netrom}, [@default, @bcast, @rose, @default, @default, @default, @netrom, @default]}, &(0x7f0000000080)=0x48) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r4, &(0x7f0000004540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = geteuid() read$FUSE(r4, &(0x7f0000006580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000001680)={0x480, 0xffffffffffffffda, 0x0, [{{0x3, 0x2, 0xc60, 0x10001, 0x6, 0x9, {0x5, 0x6, 0x3f, 0x7fff, 0x2, 0x80, 0xffffffff, 0x8, 0x7fff, 0xa000, 0xfffffffc, 0xffffffffffffffff, r6, 0x6, 0x9}}, {0x1, 0x101, 0x5, 0x7fe00000, 'SEG6\x00'}}, {{0x6, 0x2, 0x0, 0xffff, 0x3cb, 0x9, {0x4, 0xa140, 0x7fffffff, 0x3, 0x3, 0x3, 0x3, 0xeeed, 0xfff, 0x4000, 0x2, r7, 0xffffffffffffffff, 0xffffffff, 0x9}}, {0x5, 0x59, 0x9, 0x400, '/dev/bsg\x00'}}, {{0x6, 0x2, 0x1, 0x7, 0x3, 0x3, {0x4, 0x7, 0x7, 0x1, 0x0, 0x7, 0x4, 0x2, 0x7fffffff, 0x4000, 0x8, 0xee00, 0xee00, 0x9, 0x3}}, {0x3, 0x3, 0x0, 0x3}}, {{0x6, 0x3, 0x1, 0x1a, 0x5, 0x400, {0x3, 0x194, 0x637a, 0x100, 0x0, 0x7, 0x3, 0x6ec, 0x217, 0xc000, 0x6, 0xee00, 0xee00, 0x0, 0x8e}}, {0x5, 0x1ff, 0x5, 0x7, 'SEG6\x00'}}, {{0x4, 0x1, 0x2a46, 0x8, 0x36b0000, 0x7fff, {0x6, 0x800, 0x3, 0x8000, 0x0, 0x5, 0x2, 0x6, 0x100, 0x6000, 0xedd, r8, 0xffffffffffffffff, 0x3a}}, {0x2, 0x80000001, 0x5, 0x7, 'SEG6\x00'}}, {{0x2, 0x0, 0x6, 0x100000000, 0x3, 0x5, {0x1, 0x100000000, 0x0, 0x4a, 0x1f, 0x100, 0x10000, 0x6, 0x20, 0x2000, 0x10000, 0xee01, r9, 0x8000, 0x6}}, {0x5, 0x10000, 0x9, 0x5, '/dev/bsg\x00'}}, {{0x5, 0x0, 0x3f, 0x5f82, 0x8, 0x1cc, {0x5, 0x3, 0x4000000, 0x5, 0xfff, 0x2, 0x9, 0x6, 0x3, 0x1000, 0x3, 0xffffffffffffffff, 0xee00, 0x6, 0x8}}, {0x6, 0x4fe, 0x9, 0x7ff, '/dev/bsg\x00'}}]}, 0x480) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x98, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x83, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5e"}]}, 0x98}}, 0x20000040) 02:59:29 executing program 5: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:29 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x41}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, r0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x92]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe7}]}, 0x64}}, 0x0) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae00000000010000ed02edb9000000ceb8da9248a95400000800230000000000050006210000000000000000"], 0x2c}}, 0x0) 02:59:29 executing program 5: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) [ 1443.635872] nla_parse: 44 callbacks suppressed [ 1443.635879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) [ 1443.697417] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:29 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r0, 0x300, 0x0, 0x2000, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x100140, 0x101]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40004) 02:59:29 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa88}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008081}, 0xc450) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = socket(0x1e, 0x3, 0x2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000000021957215ea7cdd63b70165e6f329c936a1", @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x24008040) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000580)=@raw=[@map={0x18, 0x7, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x3a}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @generic={0x7c, 0x4, 0x9, 0x4, 0x7f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x25d76736, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xd}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xcf, &(0x7f0000000600)=""/207, 0x41100, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xb, 0xd0, 0x3}, 0x10, 0xffffffffffffffff}, 0x78) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r1, 0x28, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x0, 0x6, 0x80}]}, 0x4f}, 0x1, 0x0, 0x0, 0x2404c005}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x12}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x4, 0x2b, 0x1, 0x6e, 0x4, @private0={0xfc, 0x0, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, 0x10, 0x40, 0x2, 0x4}}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x200, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffd}, {0xc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x81}, {0xc, 0x90, 0xc0}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0xffffffffffff8000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xb1}, {0xc, 0x90, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc, 0x90, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x9}}]}, 0x200}, 0x1, 0x0, 0x0, 0x100cd77d646dc26b}, 0x20000081) 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae00000000000500000000000800030006000000000000000000"], 0x2c}}, 0x0) 02:59:29 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8001}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x584}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe4, 0xbe, "685d7f0ff8dd71115aeac7330395028b9feb72c87cacf7378d1308e3acefcbc059640a2f088897f297c18356f01ec59606b9611040c071deff06889fccda8cdc34af3aa169e7b8fb4646772cb58857808a6fd4c565bbab08fcd798eb8ce56f41b50e23198de2e9cf8560da9bd3a46b11c8c8adf22d00332010c02069207c856c60a7f415b3cc6a3a60065092ba3c413945309a6e765608e16bd9d45b97b3346316a5e030218e5b8dbe0a8d3e87fcbfd8c0e7183e64844cb1efec586c13b611ea3320265687409628bada1d29db7e99ecda4a87cfea6cb48bd866f6a8dd4c4ad0"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x32, 0xbe, "427c3073acf94104b4f56e3aa588145d0675fa96b6b88dc0f9bbfb9affd3e9176d718b77c2f11c48558380a12e24"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x58, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757"}]}, 0x58}}, 0x20000040) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x40, 0x0, 0xa3, {{0x3b, 0x4, 0x0, 0x6, 0xec, 0x66, 0x0, 0x7e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0x13, 0xfa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @empty, @rand_addr=0x64010102]}, @timestamp={0x44, 0x28, 0x54, 0x0, 0x6, [0x80000001, 0x100, 0x45b4, 0x800, 0x10001, 0x2, 0x9, 0x6, 0xff]}, @cipso={0x86, 0x36, 0x17cd1690b49415b8, [{0x2, 0x6, "399775f3"}, {0x5, 0x12, "ab7fe6ceaa1f2a565bbc615b13f9214a"}, {0x0, 0xc, "d452c78502c2433aa26e"}, {0x6, 0x6, 'GV0y'}, {0x6, 0x6, "b624c1fe"}]}, @rr={0x7, 0x13, 0xe3, [@loopback, @multicast1, @remote, @multicast2]}, @generic={0x7, 0x9, "4337464a7fb0cf"}, @timestamp_prespec={0x44, 0x2c, 0xdc, 0x3, 0xd, [{@private=0xa010102, 0x3}, {@remote, 0x9}, {@private=0xa010100, 0x37c0000}, {@rand_addr=0x64010100, 0x7}, {@private=0xa010102, 0xfffffbff}]}, @lsrr={0x83, 0x7, 0x45, [@local]}, @rr={0x7, 0xf, 0x6a, [@rand_addr=0x64010102, @broadcast, @multicast1]}, @lsrr={0x83, 0x7, 0x57, [@remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x6, 0xfffffa06, 0x48, @empty, @private1, 0x80, 0x8000, 0x5, 0x1}}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x243}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffff}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) shmget(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x4, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) [ 1444.054330] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0x5e, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x90) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) read$usbfs(r2, &(0x7f0000000300)=""/233, 0xe9) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40000000, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x1, 0x5, 0xfffc]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8040840) [ 1444.098370] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:29 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x110) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0xfff, 0x126f]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/bsg\x00', 0x402, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xe8, 0x0, 0x736711db0b3714f1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x7c, 0xac, "86d908bd1611ff5f86f91fea84caa478d793f9676e4f9524d487357a94a23e5d7946cc173dece8af2df047c4694ec75ff278ffcd1f554b7baeb340c4ec92624320be6429a672a47f8f47a033a89fb8b92f953be0159033b5eed5c2bbfa2030db83918c2bacf5e9a3b8dda4b7a9ecda0dfb6c7816a2ac9172"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x4}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x8c, r8, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc75}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7f, 0x2d]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7c}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffbff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000c095) [ 1444.197199] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) r2 = socket(0x1, 0x3, 0xd30) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x800, 0xff, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x80) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0x0, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x40000, 0x0) write$FUSE_POLL(r5, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x7}}, 0x18) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x61}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x37}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10804) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfd375001b0000000900051f00e7ffffff000000170000011cfd060000000000dd270561ee3de79af779d54b7398524cafcdabd8a0fed6415485fec510d85acfd6b158986ae8c54e324b8130394699d1f01d0f19e568bc4a982ccf1e167633407f49b8ba1bc407ce306537e8e35ae06dbb9298f6f47d85e73ee285eeeaa1cebab22dbecff1ab6fbe6b58636126c9f584b94b7401a58faf5496"], 0x2c}}, 0x0) 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffb}]}, 0x2c}}, 0x0) 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0x0, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f"}]}, 0x3c}}, 0x20000040) 02:59:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40400, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0xffff, 0x1b6}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000000000100ff0100000000000000000000000000011cfd060000000000"], 0x2c}}, 0x0) 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4c2e]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x4000) 02:59:29 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0x0, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:29 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0x0, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00000008000300060000000500060000000000ffa10000000000"], 0x2c}}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 02:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2cd700a8", @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000000000100ff0100000000000000000000000000011cfd060000000000"], 0x2c}}, 0x0) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:30 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x8000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') syz_genetlink_get_family_id$l2tp(&(0x7f00000029c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xed}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) 02:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0x0, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:30 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010000785ccb4072a3b1d38e0000"], 0x14}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000000)={'ipvlan0\x00', @ifru_addrs=@in={0x2, 0x0, @empty}}) 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0x0, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:30 executing program 3: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x0, 0x803, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x400}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x25, 0x80000, 0x80000001) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250400000006000e007107000014002000ff0000000000fdff7f0000000000000108001700", @ANYRES32=r1, @ANYBLOB="080011000100000006001b004e24000005002200010000000500130000000000"], 0x58}}, 0x4004004) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r4 = accept$netrom(r3, &(0x7f0000000400)={{0x3, @bcast}, [@remote, @remote, @null, @default, @remote, @default, @default, @netrom]}, &(0x7f0000000480)=0x48) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f00000004c0)=0x8, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x43}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x10001]}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) connect$netrom(r3, &(0x7f0000000240)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x48) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x38000, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r9 = socket(0x23, 0x3, 0xfff) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40000) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x294, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}]}, 0x294}}, 0x20000040) 02:59:30 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="20002bbd9300ffdbdf25040000001400020088000000"], 0x1c}}, 0x8040) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x1, 0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xeeeb}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d"}]}, 0x2c}}, 0x20000040) [ 1444.843151] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/155, 0x9b}], 0x1}, 0x20) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f0000000300)={0x1300, 0x15, 0x400, 0x70bd2b, 0x25dfdbff, {0x32, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "77e3b3826558534a6c085df3431fd878d12c9c60136c8fd2c1787221b197e87f1e4417e99ef58b0db444ebe7bbf47282ace687015b2ed8906355e80f76219a46879aa58b830243672b02b2a334ebc14df770c78f1f4c91dc430c73a3c90b00c8af7bcf9d64827843af3b3d6eeb7933761de0af29668506dc4ac278205c4a136890b33c29e0122c4c9c5aa29f100a449bc15fea63a66e944e09d266ed0460ba1fd8811e5ede08bf18ce08447ba712f3f97d6e901df81fdd26bacd353c9257bb26a42ca5fac3eb49ed7f3b6697e6b98f85fac68e5fedea79e48b12472a0e8b31af9deab746b7f97743918e6495935b2623c342b3af790020b5"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "f8c4fd7edadd006d3dcb27f77d7e5f883a5f7f8a69e7aebb53c0cd496671db6df759e3803338b7909a6b331c980effd4127591e6c82823bf50da3cddd8388fc7ba069847fd8c80eaac"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "dbae45a7ef44f89104bf7942804a140d258b71f7cb7d830ad9998b7c7eabb8cb0fc618c82f4fda13b8d0cc546f98549a5594a168194136da6b4748e70f1d055017714058aa5a81e17aa1b09ced444017922c0218aeb00ff453fd7ec1e6e5a17f382a5b1c88d3275e1680622f0285cec4c033aa9b5ce35d308e59b670141e3267dd6e75fc7cc06f9342cd38560ac079530758e33b0f6634abfd"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "d598c70809996d398b75db3bd2033f21972d3897005cf0455b6f41299b94d5a4e8fb0ea88667ca50bc89e1a903ca6a2effbd337b63fe762583019b3d5727dbaf88416dd318b4b8c0b500a90a6ce1dcea094a4b0bdb444918fb4fface6f9508f13b258b0a3e193f84a8d45b8c885625c4b71cd425285a71a950e54f2c82a0748e33e59d5c9e942c90f099ab5b03efa05c50b48fe55cdf18eecf9fc685103f5653480dd84188ef1b9c64b2fcab9dd01e9427eb5ef9dafd36de8324e2ccb24f91782bd9e02373e03dcf5b8530418a348aafac7f00dad6eb2637aad75a2f9d6d717047f737508a4b8649e3376ba478e9357b7c7b45ff2938a5a081c08f6993f8aad08498a2194325720da3404c5981ce3163d690b89f8a27f84c424a8da943167ee6338b27b6069079e9653895fbf7d1d168fba321b3d42b628d3c067760e56a6151e78f422d41f15d630ffce6264f9f52ea3bb9f00bbdcffa6fb92c433a98d0767046306d0e4e8ff3c2191b05927b29400d3a34ea888819f740f1e6a0838305d5854df17b53af92422064a4a51c75e8124ffc2b3f80ddd1cde4218b05de779bfd9f31622920cb25083bad20790263e978e61b03137088857b9b8710197fd7933eb86fd53105e81ff6c7e3439d244dfd649f9db64ad8eff06448a8f511adbf35ec55be7397c90926c539ef7ba3af9e35c10cc6dc999f6acb8160b52a7f52b396ee8693eebc9da984ba871b22702b57d739c263b09bbbc8f3356761a0be0d406670b09b01ebd4285d4f5663c2acbdacc8e543a76635c312e9eda977beef0610160438456a191e2f959bf6d0093ecd6ba5e3b55840727d3da82609615fab4e6aae15288302c2faa42b0985e59467153ed8f10e9e7ec76d6a3fd44f325a45a12650ce280949dc70f0536ab4c9d28fa34dee33d442806cdf5225b7c62100e2fd4451989a9169fe5734959182e5ca9572bf538607ea7c6d0465143d038ba8eee9986bdab40ba60d5289c8092470e39da1d6fd57f5d444fa595f5ac846ac326f20c5c18c97843a13e96c1c8154e25350159c60923d094d58f4a8221495d8b500b4eef5890a199e1e218f8568e613b1d61c22d12a1671f1e7979bdf623eabfdef237be94f649b44d30e9b06c391ed91e14941cb151c2f9cdbc2bf4e95f92ebef1492a1e392d3adfb7c00e9932d0e0e36368ef459280b48b6a4257d5351cb65f73d2c61576674dfb5ab5a3b0b5c949adb92d1c9b12ecb83ba24d229d774cd0733eab2cbdbf2599c535cefee4293a87c7563d73f8b8c9cc2bfcb19b52e1a6ba4133750dae3f1b6384aeaed1af89c7c30726329c963bd4548274bc272f054baf28052e4336c3cc38588bbc9458d7571f913a6913d97914e8f52e966c8008fb0a106621a7ab82a5e75097a9eca27a2ceb524fe408d81188c2c4bbf0bb3a01a3e0e832c7b19a00c39f336e2419b15ec2b552b8639e67dba40d2d0fa6a70a20eff72d31aeb0618a9aeba3f6d0b691a6458149223c21df88ed1ae61cc3feff4f6c86fe3ea17e2e20d490c765e5e885888475d16d907feb2a0009d37e218b8ffae8fb603516fedecb256f702813c6115c513f268bcaa9ffd7d917e8b622a9d817176a08bafa938c4cadeda40fcbaa71f3da0f7c30ea741100678ccf8848b7eb8ea1f977ce66537731fe34e6492c463648b1b0f80e9f1bf164975bd602eb56f7b9ea266e5591e0b1bebfd6177c19e831b5eae0163e44063444624b00c6f5fc69a809b2653261bae102825dc5661ee9d635d2ce9ab4b40fdb80c425532fe9cfa3689b2ccd4f9336a173a2f2c11bf0854dbce66e755af11b37a2ea400d38d33857b4e96ba33c51ce781be64a1a80986fb02f91d294cf07ab08565edee5fd562a7ed85378f06ae7fdad770c282ecf89df805431c0d613db02116b2a21e8bc0e08fd1a613a75865b8508f5439e28f50da7f3760d9ad17c58e829f43d175607c3f22950084e2e4a06b4f963721eebf751296d6904a84c51fcc5a9a97c4ac966cf193f6b229801c55a08ae3e3b46438f96e1eabb6f845cdfbdace6f8e5899e28a0017c53fe1024cad4b49259b193b68ca59c0cc10397e09c722cf39e77fa79649eb75f7d855d1ec26a01c65add2780cec4da25a32fd108a2a65973abcead5a760170cb7def13020fc2634ef6e449d3020099596b2ba353ffeb297175c724677e43208b986b0f73a49d27df04da43cbc9cc2c10afd47ba50d4f2a478d04dc79b0ec1977ac39a138b676b32ead3dae768fe9f8a4abc3a6c7d572c00e363ad0e41e8ac3e123341af29ec47602d50a5e8f0cd5bf66bfd0b4f3d824c360ac0371adce9c18c7e36d3bcb7f2db972c3dfe00d27bd55996fd152706a6be63ce77e583aaff65178d9ef03e7eed02ae67d3943b0af4e54a2c4e0f30691444533ae480fc4651b26dbd2b7cfba72de9c780b6755b2b2efb25ecd92259cef74d48c6b719a49d8357db3232b0b52db2fff79a18b1b09440f0fab3a8c018d09367c012de6adafc885b068c69ca79f6ff61d8b71e0b4f786bd38b97c2de821a12bb4c7e652ba4bbf59f85343929af8e4e09de8304cdfa0816674d57579824db8abd26c4150da09c1c635d4196139ae07c8312ccaebc942979ac24e497ad355ecc55133f3d391dd5f5f8d6040d890f65a0b1433b028fbecd4a4d780c791a975e4bafc18ec16189663452d74502b74f044a79dde47f71df1463e4d4759b5020ad32b3510d1a2c5dd63523c2dede7c2bc5868195d490fad28c48f76a5aa99c617c3f0e196119e2200bfb74c6f04ff557a62174d3b764d7004d20c0f9ce96d884b125b0790b522be5d76a51903661bc170a2a36e37fe895d919b01a2e7b8cc785c4ea1d9a8f5eb5582d95e4f7acdd38dc7e812e4ba3d732a3c46aa6f6bd74af8865d1cdc1570fb7fdd9787398cb88d51b2f655bd0d78790846f15b65b956db72366a11d33b5f2bc5443f38c5f15bd39844b8b9712c4a69d0a8ce9cebd904eb6adc54613bddfb7745404408653f3e5d7de3184f1448173ca694def9b8f88ce32b90e2847d89fbd5907a2ff52f70ebd6054d120c9900f330e2e1638f56dc48cbd181406fef2ae22470cedd60b5f980faeeb8808659e34d7f1855c75cf6e8f094ae972f18764f981af3cbb388709ad9c48c65db39f2b7a16f2e2fd57f1d0b3fb8f32e9e2578f93ee7fb3fa0ead4f20a24380879cbcdcb709630e51bcb3e88d5b98b2cdb89df55b657c40c88ec7a7cd7bbb3662c798756e2399c05d12d00135bc1d91f0c2d4593034c388f576d854223a6046b65f994e87dc6ad31cd4ae6061edd294027cae2297f13c3e17c6f0f89e4612e4e66698a74c77b3509534fe3007e5d60a17b34bb9e13f718992e7e04b175ab8bdad372ecadbdb06ecbfd7dc2e26c267f1e0ecc17fb9ad28866edd64cfc8a26db10707f6caed5da7611e0a4caa5e96e24bdf9e578db50cd39a3a899636f3d8279d849729bba16ac6708699fafff745450da7ed2b94cb6df5d78b454bd37c0818a09a3434b27789406c8708b08382b8239701fd852dfcdb906917403f36e37b3a937d63b03bff15cd9417ded312da70c2e0b33afdb9e6d3574943757f82c6f9775e494f5e628646380899bfe9124169dd377560e0f99f504395bbc1d9d0413b03b3c365969bce073500a9c670a6fafabf217c66d8a4a0b3b2324d6e64e4d22e04dcce39502e0b3dca55ee31f56c7555dbe7cef3f1280601dfe0e67a2cab1d40b2549b460eff8123d335f439deadcfc6e32e8f6b0885da93c8d065336097a70bed97574cbd98f74a31979c2538fa2d7fd5d462244bbccd99a1fb54aa695267881b3dc776a12c2442176073f9372685ba75ece3a854f97315becab11cedeed5cf137692a931ad1895d733b716c4d491aec126c8e20cc47fd080e36bd9ffbf40f31d04c7cb9d8450faf9b6921cadf3c390835e9a7c666e6e4622ab6a233e7b22895c5af918c92291e858a3bf02e40e9c01e2fa4fc0b447e43582f33110c986ae9a203aeb148c5b00924330fdbda29dcbd06dfd961ae53a8a4dbb3f1f570591493e7b36be29338fae03c213eef156e2306ae0c2955c3ebb93877e82d4a5d9c2d8309c3eaf67796f5b9fd22cf3b68b62572ae2b3177f9f3f2454acd8bcdc9df0d8300d997e28a980523566e5b513a3d285799ff004056f558a3378495e8d1dc7404054bc4b0adb882470ea472052ea61483d9232e11320925b95dbba4864444e813e682314026320c47a027ea28d3b14b13db104535418eb4a311c36111be68d770f6fd82ecfacea221731aeeda8844e56233efc932f494291348534302853a1cbfb3e07f5b43807c934b6b935551325b06797043814bd849087bfe3f90ad65006b4b28d2e74833bd124a219fbe1a44c4ed221222870328936a0fb6a812ce486090663eb615656e45047d1d31df279d0121c2f3e61bbe32a53055d05996e841debb7b92a11e3cec4f1db901842cdb82b2cb56811af906108cf9f358deedd86dc9d6adea618be0b6d366965569f3d7388eb875189f046dd4a441467b44419f875f08a566e2964237a835489668b53f9932d1c2823a03c32d19a0451c0c15cfdf7b1fa822d78f002b1b63edbdfe417021405645cf78e2c883db49d5a77b21324d210aec5184110fd10357bc8b86b4a16140d4cd3d1fc7a7c7a73d4029659470aebc671610663444b7d94b8a5093d675ed96c41e811b04abdab2d880f67c62343f8f4d3de29bd69b1c61a67cb66facddf680ed7db7b6f3b48f30c62181de3eba0f54f6bd6f8fdb604937420579d773f10b8268c650e57c7b4c52a72f33bf64c6d9c697e6718573ade8502bbb91c087d6d102fdea208eac63bb2fa84cec1291c5456b54ce053262beb61ab02d0233b917b52ad0b5874b10df885bae1a874ad94ceccc766ce1fb323c67b5e062856a59b0c28e0e15cebca681fc70201e76e0c5516c1c3c95ad78b29ab8e716c2155874ccf551294ada99d182f3706530798ac8217da4412fddb2027acea732b730f8b55e5aa5bb09ed91db0668753bdc527357911665462091edcc802a0eb6e1b32f933b8432958a4421993d6a7037062ed7d71b5d007d4650c14137b82152006a1f501480536b5d8317dd654fbf736addc82e14b56776ea00a3b1c156b1a4e10f5b66839f7287e687a18470895d8096487c5cae0ecb354945ab28fcf8df9d12c389119622e03f0829f2d04cf6f1cb29fa216eedd73d4d25bd07d7e020ce79c9ebab2dd58a328e67f18c368a51212a66d61502017746900e6b9db17e248dd8cb4b6671774e0d8e6a53fcb965e2980ab1bc1c529b8f7d09a0b6edf892d1192921a2a2bc47033873bdafa67ec226b1da6fa10231e296cbff14ac657988565a07bb9a6c6201af36195acee11fd71f0fedadfc72983dbe634a21ec84d412af9dbed14407b3f0c4e727c95b95b0fa99ca54d3edc9ff72b6a4dbb862d422c558cd5ef4057047f85cb3464cbf328ac51301f7fa7c8b519e358b40bce29526af68a77bfef0916a8f558a34b30ac74b786993f2ce46a3cc15400788984cbbe53b4ad4e7d0291ff14a44d3e9b6644a5703afd05f948f25be5026701e21a4008dedae9d6d8299a6ff656ec5bb05dcb0bc6611e6effaa82a663c2980f0fdf6ccec7fc29426a33e49060e83e00ce0f4e819fdd0cbbc0c8baf2d4a3ee6f300efc6aaa2b50e539b7244f3249e8c68292f6350b4c17a651634336702b3580778f0126435ddd7dfdca35a19e70c66818660bc4402e305748e0573b94ecd26a3fb55011e878c007273"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "7819dd9205d082cfbb34b20a59200d007dd5420d3068e1b08c6a2b6295f4c4e0efb55134571636befed77fcd91c59d9ee223ffc1ad586c46b927f332eaac43f0942d4ebd9c8f24a484ce72482380f49baac6a1d64775871f75a5fddadf5147d691cdb9e6f850ac81db15a8013a4e4ac11a3a78a6810f2501d1cab3df3a3ea491cea1388165ddac21084b4ac7bbb4cce5afbca88d721217b5c8fe560fad06aeb166779f7a3d76dd422a6f1f9bf815d9b92a528c1de511dd6ede7f969c46502a7dee1df2c012a19381374ebde0"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "31064371823b4351c26109f13541bff805269db657073eb5f2a65b912d9d75ed23113a6990bc"}]}, 0x1300}, 0x1, 0x0, 0x0, 0x40}, 0x8011) [ 1444.888893] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1b0, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}]}, 0x1b0}}, 0x20000040) 02:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="09c39e572bb4fe05f805524719b4045d2f428db01888c382858a3462a5c37141baf4940b1f60ad3fad7ee656", @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:30 executing program 2: socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x6c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x422b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000884) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x118, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}]}, 0x118}}, 0x20000040) 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x14, 0xa1d, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "79a94fd967c0eddf6b3784c7a39bd4627355cb35059af3ab43d06f4c76ffaaba1ddc890772f775585d08e4bf194b0f5c03f3f16e2d94a84dcafd8ee711257daf0de710c2df2b0258b6e66d35fb20c41135056703409bd430fc3d9b989ddce26e0e7f4777baedb570cd7315ca2fb53d4a93183bf5"}]}, 0x30c}}, 0x20000040) 02:59:30 executing program 4: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11}}, 0x14}}, 0x20000040) 02:59:30 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x401, 0x7]}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xae9d}]}, 0x3c}}, 0x8040) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000fcdbdf250200010000000400935a166a287f0fd8288603fcffff0200393d6eeda5c4919aa078af3d144d91945c1f5b2d12ed25a138e291d5527dd7dda11a2b3b8aad1022fd52ea3d1f67ec446ac2253681415e1d07452b9ad1aff90ca7ed"], 0x20}, 0x1, 0x0, 0x0, 0x24084024}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r1, 0x1, 0x4}, 0x14}}, 0x0) getsockname$netrom(r2, &(0x7f0000000440)={{0x3, @null}, [@netrom, @bcast, @bcast, @netrom, @netrom, @null, @rose]}, &(0x7f00000002c0)=0x48) [ 1445.043554] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1445.081891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x294, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "95b3c333ed1b3c819974a9db03aabf94ac724374b06bb217a35a490df075f4d992ae3eae2aebb4e4654a53b1febb413ca8bef34b51e19fef57e883547cd201a0209d52e548eafdcf5fdd8a9dc855905e29a473ddac0ae540c1b31bc82597a5bd154b070617c69e4efbe4e672215abd43ca48facfcc1b46d4a5654c19cc9d32baadcfa5dec034e8b377639d71d21a25b3d9637f797ea2ecfbff6eb2ee6b9b169c5d6ea9f145b3cb9e23aafd25c0f67368d190d3473382652dcd5569867c616d54dd2b6fbe99088b652730a850428af381db6b64c9337761117ec5a4ef8f2dd88a"}]}, 0x294}}, 0x20000040) 02:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x402c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000008f00000081d65e648096df89000000", @ANYRES16=r2, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) 02:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x40}}, 0x10) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1b0, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5eefdfe8961c2cdf5820d26a61f3fb7274a991635702a91b6c966cfd79927b88cb96063da59764b54a4bc10feb95558aedfda22bb76ed5dc8efa27c60522bb9fa2bd46d9a04481e2bde104337d09c6472c4ba3893a57da2fd570eb8ccc56700f57cc34656c6a5a07a1e21b3cb6bc100051b595490a6358c7158031fd07c3c962"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "e3a1367ad4f7c1ad1d154a52acf19f6e37be7370c8d0ced55d3b8131646b3f73e108f26af30088be7a63ca6afea210cc97252786b79ea9095bff446a882e83f0dd7b9c4c4bc820d6ed2c603dd722b05ed07845cc43173787dd9d71bbd662cc12f7beaa38367b44f041b67c00b603b9d0b64ba17fd6d742e6c91f16628012ed6c9eeaa2e6837070e9a7f488144e6220e152352a"}]}, 0x1b0}}, 0x20000040) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11}}, 0x14}}, 0x20000040) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "0f81c2e6db0756b86383fe"}]}, 0x24}}, 0x20000040) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11}}, 0x14}}, 0x20000040) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:30 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000007d93f519493c09312962cc25bbd7c70d0000", @ANYRES16=r0, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) [ 1445.234781] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x118, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}]}, 0x118}}, 0x20000040) 02:59:30 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2162}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c005}, 0x4000841) 02:59:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x80) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)={0xd6d5, 0xf, [{0x3}, {0xf}, {0x2}, {0x4, 0x1}, {0xf}, {0x6}, {0xe}, {0xc}, {}, {0x5}, {0xa, 0x1}, {0x6, 0x1}, {0xa, 0x1}, {0x7}, {0x9, 0x1}]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c269100", @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000000000100ff0100000000000000000000000000011cfd0600000000001cfcd45bdda042354914c6754a30d01335c5db852edd23"], 0x2c}}, 0x0) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e4f2a6278206000000050006000000000022b5f3f452d86edbc11bfec446e678aaf4722d1d13232bc5f8bd6605a2f73bdb87c3393d6205590400000000000000282ae391d41a26f602613d48a57b9e6b59fe8d44dc7d4ba8d49d8cf29c34d706dd50a55a8a21ed05a3d4484af90a26c916a09aa0ab856f36bb2babd0e200d87f97ce2675458c4c60fb5ecfdaf19afe8c56a3ddb71c8128ddf0b0cefe213ae01f6d79d57b551c644bff8b5f94a52afb622d64d39994dffa7c3785fecc6c1d2f51bce1d8b58d78862225e0d67b5941696d56db5218add80c625fd08e45563e5f39a69c8f85b9ba6168e1a2f772c9574fcdb322d1dffc"], 0x2c}}, 0x0) 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11}}, 0x14}}, 0x20000040) 02:59:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x40}}, 0x10) 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11}}, 0x14}}, 0x20000040) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x51}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044841}, 0x4000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfaf00000000000000000100000005000500000045ff4442ce842eebd17cb9eea184e400000800033208aeb4000500060000000000"], 0x2c}}, 0x0) 02:59:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="09c39e572bb4fe05f805524719b4045d2f428db01888c382858a3462a5c37141baf4940b1f60ad3fad7ee656", @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) 02:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) r2 = socket(0x22, 0x1, 0x8001) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffe}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffff7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x41}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xbf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048081}, 0x20000000) 02:59:30 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11}}, 0x14}}, 0x20000040) 02:59:30 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:30 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x44d206c66d219b82, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x7b8c927313b0aebf, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 02:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400c1}, 0x40) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:31 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010000785ccb4072a3b1d38e0000"], 0x14}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000000)={'ipvlan0\x00', @ifru_addrs=@in={0x2, 0x0, @empty}}) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x98, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x83, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5e"}]}, 0x98}}, 0x20000040) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20020cbd7000fcdbdf250200000008000000fb00000014000100fc01000000000000000000000000000014000100fc00000000000000000000ea00000000050006001f000000"], 0x4c}}, 0x4000090) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x110080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r4, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x8000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') syz_genetlink_get_family_id$l2tp(&(0x7f00000029c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xed}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) 02:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1, "0f81c2e6db0756b86383"}]}, 0x24}}, 0x20000040) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0x5e, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x90) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) read$usbfs(r2, &(0x7f0000000300)=""/233, 0xe9) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40000000, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x1, 0x5, 0xfffc]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8040840) 02:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x110080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r4, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0f81c2e6db0756b863"}]}, 0x24}}, 0x20000040) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x98, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x83, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757eeeb5c57fcfa36d14821ecdcf3a0042a6588dc6fe8b670d5b8eacc491f3df93b9ee108fea134f91f84e1f46841f193a34ce216e64a50829df548223141fb5e"}]}, 0x98}}, 0x20000040) 02:59:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa88}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008081}, 0xc450) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:31 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x800, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x7fffffff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "907cd8a08147860f8120e489b2782c09"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9d82a7dac23f"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5aa}, @NL80211_ATTR_PMKID={0x14, 0x55, "dfbe46ca0ce219cda638f890bce3229b"}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x58, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757"}]}, 0x58}}, 0x20000040) 02:59:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x7b8c927313b0aebf}, 0x14}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x150, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xfd, 0x2a, [@dsss={0x3, 0x1, 0x78}, @preq={0x82, 0x51, @not_ext={{0x0, 0x1}, 0x91, 0x9, 0x8, @broadcast, 0x8, "", 0x9, 0x1ff, 0x5, [{{0x1, 0x0, 0x1}, @device_a, 0xac4}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x2}, {{0x1}, @device_a, 0x10001}]}}, @challenge={0x10, 0x1, 0xc9}, @challenge={0x10, 0x1, 0x3f}, @fast_bss_trans={0x37, 0x89, {0x60, 0x3, "14169e9002824bacf95b9e8253d1d4d9", "408ad1bb024422e83d30a7ce662928fdf07c9a250a49a2888b96e50febad04e0", "ab07add38e6ed955c7ccaed3bfeca095d31874d9dfca56bec8e3119fbf8564c7", [{0x4, 0xa, "de8e6c52ac7796ce2a3e"}, {0x3, 0x21, "26a2b5e89a7e691aa4a6ed400dcf8f3edb554860130b1886f7dced1801ff9fea65"}, {0x3, 0x6, "e235bcc07f60"}]}}, @supported_rates={0x1, 0x8, [{0x16}, {0x6c, 0x1}, {0x4, 0x1}, {0x16}, {0x12}, {0x1b, 0x1}, {0x3c}, {}]}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x400000}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48010}, 0x4040) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0xfffffffffffffe83, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) 02:59:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x20000040) 02:59:31 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:31 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:31 executing program 3: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:31 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0xea09f0be353f52e8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x100}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="fd5e7900"/15, @ANYRES16=r0, @ANYBLOB="0100000000000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x42001, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xc0000000000000}}, 0x18) 02:59:31 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x46, 0xf6, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private1, 0x8000, 0x7800, 0x100, 0x5}}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002cbd7000fddbdf2503000000050005000500000014000400caf1ffff01000000250700000200000005000008000400ffffff7f0400fc01000000000000000000000000000100"/84], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x8000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl2\x00', r1, 0x700, 0x10, 0x2, 0x6, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x6, 0x8, "bd2171364812"}, {0x1, 0xa, "3e339993799b14e2"}]}, @timestamp_addr={0x44, 0xc, 0xe5, 0x1, 0x4, [{@empty, 0x1e}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_SSID={0x18, 0x34, @random="38a427895513f02cf17b03c7acbfa6750b00c273"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "2fd55e8a174a9e3d38c5cec9b6a3a2c7"}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x4095) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x58, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f67fa70bfd9998dc54016082850baa78d39535086e82c4b63b36f3ad3e6c757"}]}, 0x58}}, 0x20000040) 02:59:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0f81c2e6db0756b863"}]}, 0x24}}, 0x0) 02:59:31 executing program 3: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000ff0f0000000000050000001400080062617461dbf6ab16eaf16f647630000000000000000000"], 0x28}}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x625}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xca}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x5c}}, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ca}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44005}, 0x40080) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x841) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/53, 0x35}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000900)=""/61, 0x3d}, {&(0x7f0000000940)=""/201, 0xc9}, {&(0x7f0000000a40)=""/86, 0x56}], 0x7, &(0x7f0000000480)=""/104, 0x68}, 0x12100) getsockname$netrom(r4, &(0x7f0000000540)={{0x3, @rose}, [@netrom, @rose, @null, @remote, @default, @remote, @default, @bcast]}, &(0x7f00000005c0)=0x48) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f"}]}, 0x3c}}, 0x20000040) 02:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="178d3f8a", @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:31 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7f, 0x5, 0x6]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004001}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 02:59:31 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x82200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) 02:59:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:31 executing program 3: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0xe00, 0x9, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x450) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) 02:59:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000f6", @ANYRES16=r1, @ANYBLOB="bfae0000000000000000010000000500050000000000080003000600000014000100ff010000000000000000000000000001"], 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000023c0)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a975ea78a9bcad03799298bbdeed07e4ab1230caf25f5c2bd57986d70f92da4ac6005e676de9ddb479666c6dd87ca9023cb122432c7950a065e71a67b6eb072e586970fd8bc7354cba59908fa1a869050000005044cdb058422c3c8f019007dafc4b428b0c6458313fa924741cb6d15e741efc437aa380ba3f3bd79eabe61029d71dc50872a51ec3ae6d31511f37611fa833733dbaeb66bb27fa26687fc670d57d2a9abe2c55afea3fe956299d9b12ae7d9a2e33d5abcb8f39106106d6f321cecd05d2dd03a41b42905aa3dc7174206685825d7dc8c68729ddd091b81ed57936b8593de337c8f30c975d", @ANYRES16=r5, @ANYBLOB="000227bd7000fbdbdf250100000006001c0006000000"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x54, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x5dc6a62bae9cc32a}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 02:59:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 3: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x2000014) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3], 0x2c}}, 0x4000) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0f"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3b}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 02:59:32 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 3: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d5d1594ff8607f9b759b2949afc044f"}]}, 0x3c}}, 0x20000040) 02:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xb6, 0x6, 0x7, 0x0]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x0, 0x0, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x8}, 0x4000) 02:59:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xb6, 0x6, 0x7, 0xf91f, 0x0]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x0, 0x0, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x8}, 0x4000) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 3: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3b}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d"}]}, 0x2c}}, 0x20000040) 02:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000695ca75cdf00d74e88944d7c4995352de8dbb4fd65471c3c50a4aac45a1a18a67cecebd0ac17dac4c07c17803eb421ff4d", @ANYRES16=r1, @ANYBLOB="bfae000000000000000001000000050005000000000008000300060000000500060000000000"], 0x2c}}, 0x0) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000cabd759ae40da35d9ad3cfda538eb18856e4b8217afec431964e2df59a7a58334c11ea280cf0284f7ec7d11b5774ec325b55bfefed094f932c056294734788caa4fe9619e93713389eb8ef196933bee830757f86b3", @ANYRES16=r0, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x400}]}, 0x64}}, 0x801) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x402, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x11) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x40, 0x12, 0x7ff, 0x24, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x21, 0x80, 0x3ff, 0x247}}) 02:59:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3b}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "0f81"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') recvmsg(r0, &(0x7f0000001480)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, &(0x7f0000001380)=""/236, 0xec}, 0x40000101) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x78, r5, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x5c6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xcf}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3ff, 0x2]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0xfffffffffffffd1c}]}, 0x2c}}, 0x0) 02:59:32 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) 02:59:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "0f81c2e6db0756b86383fe73bbf9fecdf30d"}]}, 0x2c}}, 0x20000040) 02:59:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20000040) 02:59:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x7b8c927313b0aebf, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000040) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0)='ethtool\x00') 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "0f81c2e6db0756b86383fe"}]}, 0x24}}, 0x20000040) 02:59:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xb6, 0x6, 0x7, 0xf91f, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x0, 0x0, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x4000) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000040)=0x7, 0x4) 02:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000040)=0x7, 0x4) 02:59:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$netrom(r6, 0x0, 0x0) write$UHID_CREATE(r4, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000002c0)=""/83, 0x53, 0x5, 0x7, 0x7, 0x0, 0x2c4}}, 0x120) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00_', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdb2502000000080003000700000014000100fe80000000000000000000000000001b05000500010000000c000400520500000800000014000100ff01000000000000000000000000000108000200812fd9ce"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c1) 02:59:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "0f81c2"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000040) 02:59:32 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$netrom(r6, 0x0, 0x0) write$UHID_CREATE(r4, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000002c0)=""/83, 0x53, 0x5, 0x7, 0x7, 0x0, 0x2c4}}, 0x120) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00_', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdb2502000000080003000700000014000100fe80000000000000000000000000001b05000500010000000c000400520500000800000014000100ff01000000000000000000000000000108000200812fd9ce"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c1) 02:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000040)=0x7, 0x4) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "0f81c2e6db0756b86383fe"}]}, 0x24}}, 0x20000040) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000040)=0x7, 0x4) 02:59:32 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$netrom(r6, 0x0, 0x0) write$UHID_CREATE(r4, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000002c0)=""/83, 0x53, 0x5, 0x7, 0x7, 0x0, 0x2c4}}, 0x120) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00_', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdb2502000000080003000700000014000100fe80000000000000000000000000001b05000500010000000c000400520500000800000014000100ff01000000000000000000000000000108000200812fd9ce"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c1) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:32 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') 02:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:59:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:33 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$netrom(r6, 0x0, 0x0) write$UHID_CREATE(r4, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000002c0)=""/83, 0x53, 0x5, 0x7, 0x7, 0x0, 0x2c4}}, 0x120) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) 02:59:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) 02:59:33 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0f81c2e6"}]}, 0x1c}}, 0x20000040) 02:59:33 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:33 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1, "0f81c2e6db0756b86383"}]}, 0x24}}, 0x20000040) 02:59:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 02:59:33 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$netrom(r6, 0x0, 0x0) write$UHID_CREATE(r4, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000002c0)=""/83, 0x53, 0x5, 0x7, 0x7, 0x0, 0x2c4}}, 0x120) 02:59:33 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0x0, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:33 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') 02:59:33 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0f81c2e6db0756b863"}]}, 0x24}}, 0x20000040) 02:59:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 02:59:33 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:33 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0x0, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:33 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$netrom(r6, 0x0, 0x0) 02:59:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:33 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0x0, 0x0, 0x0, {0x11, 0x3}}, 0x14}}, 0x20000040) 02:59:33 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) 02:59:33 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:33 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:34 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x0, 0x3}}, 0x14}}, 0x20000040) 02:59:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') 02:59:34 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1, "0f81c2e6db0756b86383"}]}, 0x24}}, 0x20000040) 02:59:34 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:34 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:34 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', 0x0}) 02:59:34 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x0, 0x3}}, 0x14}}, 0x20000040) 02:59:34 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0f81c2e6db0756b863"}]}, 0x24}}, 0x20000040) 02:59:34 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x0, 0x3}}, 0x14}}, 0x20000040) 02:59:34 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:34 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:34 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 02:59:34 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11}}, 0x14}}, 0x20000040) 02:59:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:35 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0f81c2e6db0756b863"}]}, 0x24}}, 0x0) 02:59:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:35 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:35 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x14, 0xa1d, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 02:59:35 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) 02:59:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x1f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004091}, 0x48800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') 02:59:35 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 02:59:35 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:35 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) 02:59:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:35 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x97afa44b49c98f45, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:35 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:35 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0f81c2e6db0756b8"}]}, 0x20}}, 0x20000040) 02:59:35 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 02:59:35 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:35 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:36 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:36 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x14, 0xa1d, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0f81c2e6db0756b863"}]}, 0x24}}, 0x0) 02:59:36 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 02:59:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:36 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:36 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:36 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:59:36 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:36 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:36 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000040) 02:59:36 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:59:36 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:36 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:36 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, {0x10, "e90c10e1fe47eb95287dadc938483feb"}}, 0x16) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:36 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bfae00000000000000000100000005000500000000c505000000000000011cfd06000000b912"], 0x2c}}, 0x0) 02:59:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:59:36 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:36 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:36 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:37 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) [ 1451.561779] nla_parse: 16 callbacks suppressed [ 1451.561786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:59:37 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) accept4$phonet_pipe(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:37 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xffffffbb, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:37 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:37 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x6, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, 0x0, 0x6a15f8612f0e7b7) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:37 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, 0x0, 0x6a15f8612f0e7b7) 02:59:37 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/137, 0x89}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, 0x0, 0x6a15f8612f0e7b7) 02:59:37 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:37 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x6a15f8612f0e7b7) 02:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:37 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:37 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x6a15f8612f0e7b7) 02:59:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:38 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x6a15f8612f0e7b7) 02:59:38 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x6a15f8612f0e7b7) 02:59:38 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:38 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:38 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:38 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x6a15f8612f0e7b7) 02:59:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:38 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x6a15f8612f0e7b7) 02:59:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x6a15f8612f0e7b7) 02:59:38 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:38 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x6a15f8612f0e7b7) 02:59:38 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:38 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x6a15f8612f0e7b7) 02:59:38 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x6a15f8612f0e7b7) 02:59:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = socket(0x1f, 0x6, 0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x20000041) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x200) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x800, 0x4) 02:59:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x20000800) 02:59:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x8, 0x101000) r1 = inotify_init() inotify_rm_watch(r1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0xe8, 0xfffffffffffffff5, 0x0, [{0x1, 0x1, 0x7, 0x6f0, '[-){}^@'}, {0x3, 0x46a000000000, 0xf, 0x84d, '/dev/dri/card#\x00'}, {0x4, 0x1, 0xf, 0x0, '/dev/dri/card#\x00'}, {0x2, 0x874, 0x2, 0x6, '\xfb{'}, {0x3, 0x7, 0x7, 0x3, '\\-\\(&.\\'}, {0x1, 0x1d3f, 0x9, 0x49, '*+\"-^&\xd2{\xba'}]}, 0xe8) getsockname$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@remote, @remote, @null, @default, @bcast, @remote, @bcast, @bcast]}, &(0x7f0000000040)=0x48) 02:59:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x1, @null, @rose={'rose', 0x0}, 0x100, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8000, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @default, @bcast]}) 02:59:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x20000800) 02:59:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x20000800) 02:59:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000024c0)={&(0x7f0000000040)=@tipc=@name, 0x80, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/61, 0x3d}, {&(0x7f0000001100)=""/169, 0xa9}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/149, 0x95}, {&(0x7f0000002280)=""/78, 0x4e}, {&(0x7f0000002300)=""/131, 0x83}, {&(0x7f00000023c0)=""/109, 0x6d}], 0x8}, 0x20) 02:59:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x769e, &(0x7f00000000c0)=0x4) 02:59:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) 02:59:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x1ad0c2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:40 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7450b9a5, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x5777c1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x32000409) 02:59:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x84, 0x200803) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x3ff, 0x7, 0x7fffffff}) 02:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xff, 0x1, 0x1, @empty, @mcast1, 0x7800, 0x1, 0x6, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', r2, 0x29, 0x83, 0x20, 0xffff90a6, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @private=0xa010102}, 0x1, 0x20, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'sit0\x00', r3, 0x2f, 0x20, 0xf9, 0x7, 0x40, @remote, @mcast1, 0x20, 0x80, 0x800, 0x7}}) 02:59:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) 02:59:40 executing program 4: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:41 executing program 4: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 02:59:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x3c, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c100}, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:59:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) 02:59:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:41 executing program 4: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:41 executing program 5: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x14, 0x8, 0x70bd27, 0x25dfdbff, {0xb, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "5176d3ad5135b8f31168e7b7afbd"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "7f43238cb6fa2ada13622c5aa80a3073766cf6a3f5bb9d675fcf021c73db05d790319c02cc223933841a5207b79901f6b82332b2945366b0302b7b19c6dbe60a6e83a9221ddb6354c3c9b233cd4c04a2ce7e531f4b6f38b0fac1ced0744d27f4fd65781cb173798b8cad923b7561ea8daebd80299e69a2fd2398ebdb14212b08d18079c48d80eafc832825cafe32e83ee963fc7a55f83b366b697ae4be22fdf77578"}, @INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "399160f21c68960ab936deee54f67e9f9ab937961b96794b6f10c85a15735eed3eb2ac47d0383fe3472bfe918e11417abe0ef621eb99ef5719ca9370a494fe889383962228a0d42e4fd35df276fe2c0e57ef719bcbdf1bdefc9bf7a8e9fe8f7a93ed02d9c9c50eb50a033805fdc29fdd97b82cab8872c5771031db767cfc46c9c8cfeff1becd2e63a088207ea22a3cf22bdd5462c62827ef89e0c38db2e0d0fcebc4407634d640916e1b344c2b1b81"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "7f0d280ba71a4460ae0b61ff079645abf964697eb87c2125cf88bdfccb8931ded14652d28fad9b41fbe158c698643e95f258"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8081}, 0x20040014) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) connect$netrom(r1, &(0x7f00000000c0)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7ffffffffffd, 0x20000) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x100000000, 0x100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x100, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) 02:59:41 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0xffffffffffffe000) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:41 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, r1, {0x7fffffff}}, 0x18) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000040)={0x8, 0x37}) 02:59:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 02:59:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5eb8, 0x105803) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 02:59:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0xfffffed2}}, 0x0) 02:59:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1f, 0x404000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:42 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x101000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x401, 0x4, 0xcd}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)=""/2, 0x1}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000200)=""/178, 0xb2}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000800)=""/216, 0xd8}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000600)=""/239, 0xef}], 0xa}, 0x0) 02:59:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, 0x0, 0x0) 02:59:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 02:59:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200)='/dev/bsg\x00', 0x400001, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048001}, 0x1) 02:59:43 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, 0x0, 0x0) 02:59:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r2, 0xb81990e59747fb4f, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x835}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3c1f}, {0xc, 0x90, 0x7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24001}, 0x4004810) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, 0x0, 0x0) 02:59:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:43 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000400)=0x3, 0x4) getsockname$netrom(r1, &(0x7f0000000280)={{}, [@bcast, @bcast, @bcast, @default, @null, @default, @null, @default]}, &(0x7f0000000300)=0x48) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x1f, 0xbb, &(0x7f00000000c0)=""/187, 0x40f00, 0x3, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xc, 0x9, 0x480}, 0x10}, 0x78) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) 02:59:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:59:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0xa93e6d6be30ca0c3) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:59:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffff9, 0x3a5ec0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40601) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000080)={0x2, "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"}) 02:59:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/220, 0xdc, 0x1, 0x8, 0x4, 0x66, 0x7}}, 0x120) 02:59:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:59:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 02:59:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:44 executing program 5: r0 = socket(0x1a, 0x1, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 02:59:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 02:59:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x400, 0xffffffff}) 02:59:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 02:59:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0xffff, &(0x7f0000000080)="e96c0cbcba34b6f404dab6b9b476907a2fe92878936236758593c48d9fb211533e5f1367d0027f56b510b2708bfc9a135ab3e839cb8761a901af2c9ceb9ae44d455dd873955f72804f03e75903aa85c8a341bb017a50c3eb98ff17612a9836437a9f7972642fd15847ab008b4decb600779b1594db5d748aa37efd20da0e"}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 02:59:44 executing program 5: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4000, 0x0) accept$netrom(r0, &(0x7f00000000c0)={{0x3, @rose}, [@netrom, @bcast, @remote, @default, @netrom, @rose, @netrom, @bcast]}, &(0x7f0000000180)=0x48) 02:59:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x401, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 02:59:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 02:59:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:45 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000004140)=ANY=[@ANYBLOB="a800000000000000", @ANYRES64=r2, @ANYBLOB="060000000000000008000800000000000a0000001f0000002f6465762f6675736500000000000000050000000000000004000000000000000a000000050000002f6465762f66757365000000000000000600000000000000feffffffffffffff05000000050000005c5d402f24000000010000000000000040000000000000000a000000000000002f6465762f6675736500000000000000"], 0xa8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004200)='/dev/bsg\x00', 0x422802, 0x0) write$FUSE_ATTR(r3, &(0x7f0000002080)={0x78, 0x0, r1, {0x3ff, 0x5, 0x0, {0x6, 0xffffffffffff4ce1, 0x7, 0x4, 0x3, 0x0, 0x0, 0x20, 0x3f, 0xa000, 0x1, 0xffffffffffffffff, 0xee01, 0x800, 0x40}}}, 0x78) 02:59:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 02:59:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffff80000001, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)={0xca10, 0xe, [{0xf, 0x1}, {0xb}, {0x8, 0x1}, {0x0, 0x1}, {0x9}, {0x2, 0x1}, {0x5}, {0x7, 0x1}, {0xf}, {0xe, 0x1}, {0x1}, {0x5}, {0x4}, {0xf, 0x1}]}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x3) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 02:59:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x20000800) 02:59:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:45 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x280800, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1e}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfc}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x8011}, 0xf503949a8ec4ac4f) 02:59:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:46 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fff, 0x200183) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x100) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:59:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8d4}, 0x4080) 02:59:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 02:59:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000, 0x86500) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x96a4, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 02:59:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x200) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000180)={0x7, &(0x7f0000000080)="89798185830baaa1b30ea827da8ec37ebac56b46a6e91fc34400c77b8c05b0e56dc2700a7337a190f1c630e7cded2df9f4a8afd32b13b3a07dc55a5c1172e0f31033b93264c2d85f33899fb54ecdb7a7b08f8576a117004a663b073045cd0884ba2771627b227730ca463c5751d2900bf11c87e0649933ee21eebcd68de2e4c16d1d8279e1a609ffd4a1c38193136f8296fb6922b77ebec69c2aa6aa2b3573951912dbcb884a5617dc574a3b17f1ee9f8352f05718cd17d7c481995a5c9f5ce07dea16318b78bdd761f5"}) 02:59:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0xa93e6d6be30ca0c3) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000040)) 02:59:47 executing program 2: ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000040)=""/250) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8401) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x262a80, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000001c0)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x6}) 02:59:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0xa93e6d6be30ca0c3) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x480040) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000000c0)={0x7, 0x0, "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"}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0xa93e6d6be30ca0c3) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000001c0)) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x0, {0x1}}, 0x18) r3 = socket(0x18, 0x5, 0xfc) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 02:59:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0xa93e6d6be30ca0c3) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 02:59:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 02:59:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0xa93e6d6be30ca0c3) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x420000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x4, 0x4, 0x40}) 02:59:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="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"]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 02:59:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0xa93e6d6be30ca0c3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:48 executing program 3: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x84001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:49 executing program 3: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:49 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20442) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x141400, 0x0) read$snapshot(r1, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5806, 0x4}) 02:59:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10) 02:59:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:49 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, &(0x7f0000000240)=""/106, 0x6a}, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x260900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000300)={0x3, 0x10000, 0x3f800000}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x44040) inotify_init() ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x2e1d3bf, 0x7}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) write$snapshot(r2, &(0x7f0000000100)="06e0fa5104405eda3f7090dc6e832d0f91945ee2484159e0b02b6c1e31a711aaf4c712c7bb79b2b077966065a58381ede8886eccf636bc2ec3bf74467d80fcd3ef85168fe7b2e273811e66f1b665707c188e91a8fa40bfc6325d750fd3c9dc1baf04b1cc03f47e7cf30e9a34d45797e256cdd736eadc5ed6cbf85c457e8af621658a4489c50ad12b8abb2f4af4b009da70ff853a30418c3eeb610a98af", 0x9d) 02:59:49 executing program 3: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:49 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x311001) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/4096) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20a003, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:50 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x94802) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:50 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:50 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x90040) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x402200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 02:59:50 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) socket$kcm(0x29, 0x7, 0x0) 02:59:50 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:50 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:50 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x80800, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000040)={0x10000, 0xd5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 02:59:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x0, 0xb, 0x6, 0x31a, 0x32, 0x401, &(0x7f0000000100)="30d05c3d4feac288b47e9168f29369d8f9586cda5588fa7ae49dfb40c1cd75a8002539a5d6960b0ba89c39b221133c47f0dd"}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x9, 0x0, 0x80}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x7, 0x3, 0x1}) 02:59:51 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 02:59:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:51 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x99, 0xf4a02) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3f}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xbf, &(0x7f0000000100)=""/191, 0x0, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x7, 0x7}, 0x10}, 0x78) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 02:59:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)={0xe5b, 0x3, [{0x0, 0x1}, {0xb}, {}]}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000001c0)=0x101) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x6, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0x5, 0x8}) 02:59:51 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 02:59:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:52 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:52 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87, 0x1}) 02:59:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580)='/dev/bsg\x00', 0x40, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000002980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002940)={&(0x7f0000000600)={0x2330, 0x12, 0x2, 0x70bd2c, 0x25dfdbfc, {0x4, 0x2, 0x4, 0x8e, {0x4e24, 0x4e24, [0x41c, 0xf6, 0xd2, 0x79546e37], [0x2, 0x1, 0x0, 0x101], 0x0, [0xfffffe00, 0x6]}, 0x96, 0xfff}, [@INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "82d60c7b881c34e70e775baebc3cd02a612f65f00a737edb"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "bcd9ca82b4938b624148647a7bc50e5152f8d58eece11dddc220adfe2ec1e8ab3778d80505f3f7033458beffbfccd0f0fbe4166014a1fade4a53de490ea8033a457e068594e47d66f0f51f0ad9abc105b5283ede503fbef76cebd6762af9fe992696788f419a232822f65cb9033dd34e059fc48c66dd84518ae2611e253a82fdb0162b7cd0f9c7907703207b4b23195a750ae534a6d000254022235267b3e5ad30ad1b37300fc203f52c0d7c5830d1cdba48766055a6430a4cb81ed4768e450a02d6eae4184b94338723ff2381fcbd651f48266738f4dc2f52ca058b469c6b49f0661d91109f5f85320566d122680f92648ced75e18e9246"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "fda01053b2908d1fd1a876bdab595c7da1293ce71646399f3d14766b5e5c712d4d0f68d4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "51fdcb90a13fb7c7166f5c4135ce87cdb4f250b773fd608740cfdb19c9df9cfa993d24a9d6d98a39247b152e0e2f34939aecdc84aeeca93f00eb3f93ab5f616fbcf452e1733bf0951864399421"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "b9e4be973c44e9bca47f38b54baede498e79c54d4457d8694f6c6514767d9c6b71972df33fe192f5a55147f256a369244c974253ca87ff1074cbd2575f879b36dbe0"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x2330}, 0x1, 0x0, 0x0, 0x4810}, 0x20044010) 02:59:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) 02:59:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 02:59:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 02:59:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x400000) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x80000001, 0xc000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x3, 0xfffff1c5}) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000100)) 02:59:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x29e4c0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) 02:59:52 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 02:59:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 02:59:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffffffffff44, 0x40) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x8, 0x2, 0x4c}) 02:59:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) 02:59:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 02:59:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x35, 0x8, 0x42, @private0={0xfc, 0x0, [], 0x1}, @local, 0x80, 0x8, 0x4acb, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xd, 0x9, 0x1, 0x1000, 0xc00, 0xffffffffffffffff, 0xfffffff7, [], r1, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x40) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:52 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x7b8c927313b0aebf}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:53 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x48045) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 02:59:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x7b8c927313b0aebf}, 0x14}}, 0x0) 02:59:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:53 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x81}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x14, 0x14, 0x200, 0x70bd27, 0x25dfdbfd, {0x1d, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xe5, 0x7, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x9632f2dedafda626, 0x3, 0x87e9}}) 02:59:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:53 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x20800, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0x3, 0x6, 0x3, 0x10}, @alu={0x7, 0x0, 0xb, 0x2, 0xb, 0x50, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x101, 0x13, &(0x7f0000000100)=""/19, 0x41100, 0x10, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x1, 0x80000001}, 0x10, 0xffffffffffffffff}, 0x78) r2 = socket(0xf, 0x80000, 0x7ff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x40000081) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, 0x0) 02:59:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:53 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x4200) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000240)={0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x52c1, 0x58, 0x4, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x1f, 0x9, 0x2, 0x46, @loopback, @loopback, 0x7, 0x7800, 0xffffffff}}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1f, 0x101000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1e, 0x202202) 02:59:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) 02:59:53 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 02:59:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6441, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 02:59:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) 02:59:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:54 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:54 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x200, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x40805) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040)="20a60280e3416ff07ce8eb", &(0x7f00000000c0)=@udp6=r2, 0x4}, 0x20) 02:59:54 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x5a1d8fda453ac56e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) 02:59:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:54 executing program 5: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/bsg\x00', 0x20000, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000003dc0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d00)={0x70, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x9, 0xebdc, 0x2]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x2}, 0x20008000) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="020000000004000000000000000087760fba9b2e8f464e4dc9ef463c7594e20158530988eb8939f897750e823e3fe2df9171f15d96bfc762de122c1029c6e76bd4501a4ed7923dc8d7bf271c61590356fa98f6aa21e232849b6485a44346fc0e2efa6b032a93e4a315809c814e5f46936fd80fdd69b55bd00d1deb5fa46814dc2638f7e91ed9e6c6469df095d18aac2b04343e1f0fa652975c9066d42ec9bf21c355e25a74c4b786f6bc051f65f07b7d32b7487d41a4cc724b0f0981fb210656c5bf1681f752521affad6fe9a43bcd1d1ab5179dbabe0c8c25c74c0923a956792723270664070a951d4f45da5b075a5b43"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4811) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) 02:59:54 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:55 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x100, 0x8000, 0x9}) 02:59:55 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:55 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:55 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:55 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:55 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:55 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000001, 0x800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:56 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:56 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 02:59:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f00000021c0)={0x10, 0x0, r2}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002180)={r3, &(0x7f00000020c0)="bc3b106ce5d8548c963acddfac7d852fea82821a9e03ec4638e8d841cf0f243893bfbebe1a4c96da75c22906e20297ddd3fe79edc3a2fb4ba1a3d7b6172089b3b0e7a58f7f74edf8bb258d114d977ec517c20966", &(0x7f0000002140)=@tcp6=r4, 0x2}, 0x20) 02:59:56 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:56 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:56 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)=@urb_type_iso={0x0, {0xa, 0x1}, 0x7, 0x84, &(0x7f0000000040)="6108e811d2440426ebdf65aebfc9c3c8d5d12bdca7ade3b40d13ba576a887f40da", 0x21, 0x2db, 0x1f, 0x10, 0x8, 0xf8d, &(0x7f0000000080)="cf2186cfdfac84d3ccac5974993a73f1dde3c26d30b792bbd8d5d99a5228ef3f2b30a5dea6f00124bb96afcb9163e1865454345187df5b8c4fb6bbab87e11d354565", [{0x6, 0x8, 0x3ff}, {0x1, 0x10001, 0x200}, {0xcd, 0xd6, 0x1}, {0x2b, 0x7fffffff, 0xd044}, {0xe9b7, 0x1d}, {0x9, 0xffffffff, 0xfffffebe}, {0xffffffff, 0x400, 0x2}, {0x7, 0x8000, 0x3}, {0x1ea, 0x9, 0x1}, {0x4395, 0xfff, 0x29fb}, {0x0, 0x81, 0x401}, {0x70a}, {0x6, 0x0, 0x5}, {0x4, 0xe90, 0x4}, {0x0, 0x3ff, 0x3f}, {0x3, 0x7fffffff, 0x41e}]}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000002c0)={0x0, 0xc, 0x5, 0x9579, 0xa0, 0x4, &(0x7f0000000200)="d775a336e44269ea981173ab8d8a24fd63c3b56988eb0dc3853f872976b9c16c705b1e980e756e324d37d91bc4289dd499838e69a3e8407af0774b803a08d49d8096536869bcfa7abd1cc3bc67e146fde3f80a610e52991800c04983a9c7625d9611add44afbd7e4c9965c000f4c99c7978d3d60babab3d29d0d9c437e761999f80662f40441504b0556536e430102fb75b6dae9b5dce2c5d778181d9ea0780d"}) 02:59:56 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:56 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:56 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000001300)={&(0x7f00000000c0)=@ax25={{0x3, @rose}, [@rose, @remote, @null, @default, @netrom, @remote, @netrom, @bcast]}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000001140)=""/202, 0xca}, {&(0x7f0000001240)=""/110, 0x6e}], 0x4}, 0x40012142) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) accept$phonet_pipe(r1, &(0x7f0000001340), &(0x7f0000001380)=0x10) 02:59:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:57 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x85c6, 0x408000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{}, [@remote, @bcast, @rose, @netrom, @bcast, @remote, @bcast, @rose]}, &(0x7f0000000100)=0x94, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 02:59:57 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:57 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:57 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:57 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:57 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000eeff0000000500f8ff0500050000000000d6da6f424b8ab507dfee4414aef78de6cb5b06fc6f47fb654e470c8d9cc5a9f8b65e2562f1f70aaf4f4c229c8f8476b9aa3caba8274ad8bb05230f82615df21ed6e9c90cbcc36fd5f9c621d7944e"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004004}, 0x6000040) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 02:59:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:59:58 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 02:59:58 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x90400) 02:59:58 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 02:59:58 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 02:59:58 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x1}) 02:59:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x125802) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x100, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/104, 0x68, 0x6, 0x8, 0x8, 0x1, 0x3}}, 0x120) 02:59:58 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7fff, 0x1}) 02:59:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:59:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000004, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xcb33}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x1, 0x8, 0x2, 0x2, 0x8001}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0xb, 0x0, 0xa, 0x80, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x84}, @ldst={0x0, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x95}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x1dcf, 0xad, &(0x7f0000000400)=""/173, 0x41100, 0x2, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0xb54, 0x3}, 0x10, 0x2583c, r1}, 0x78) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040891) 02:59:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7fff, 0x1}) 02:59:59 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 02:59:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 02:59:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7fff, 0x1}) 02:59:59 executing program 2: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 02:59:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 02:59:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000000280)={0x13d4, 0x15, 0x10, 0x70bd2d, 0x25dfdbff, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "c3284813fa721765f4e00b046d839524b295d6132797848685f64cc64e8f5503a95875f8beac7ae98064eda105cf7e1df87166de1359bba640f6745e02d9ff5799d992e4cd06d382b45fdfeda56e0c827550e1a88322a82772aa1ada508bce82ef68b8d25c495a3993a185e383ebdd89721661924ba6de540c66cfd5eb2638aeb9ee95a57c738267980370bfb60e6d2da0caf8be84c4fcf4c0fd9ac169f0c64140225b349af9b81a903a717b252b97e7302e0de95bef8335f39953ba"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "ecfa26cbd1de12f8f16576fc86973e1190d9caaa4399e73c311882e5702ba479be28f60d45fe2870c30264834e1695ad69e0afc9c2f1c4d7ddf397df30a2b67338c00456482476c4da37c113e8e13755720af234901e8f408d90db534461f6c0d7e948aeec4827e5f87bb17662afd5d1c6787a225b85d1ed57504fc723025484f63ee779daae8a614a52e83aa5aa99fe8e0c8563ce4b70d3af03b27316c418fbb16971831153d0edca211886f684d9a41239fbfacb39c6cc66684bb334b10aa538657fe007fc0a137cec46aca6b46ec0b8e55b0cdc71193d14e028e250413d0040f841e2c74a25"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "c4147c66811082878152d7c4017e1c6fc0f59415d2449623f9b86331b233e3fe325b6705ce54400a009a6da10dadd8f6849439cc95be0d0b1f4e31778e53ae16a14fe01eeca597cb4adee0be8e1755c96d6952c4d6480247ce0198b2380d41a6edaae729fda4add65acd104e2e0c637e01e43302ad2c6bbb223171f29be22b7ffff3afafa6e9438760a8b23278d751c965727c15dfa4f4f90e251e90daaf9567c58f83f9c8208b2e3a9bd60d7efcac59957823ad264dab953071d555cbf8319cf98985df73aee497f8142cda66"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "f813837612d519a7ac000e6b8f69918d19e92a7a6bb20e3f0178a90d51b412efdd5a916fed1d02485c8c2710c35463c327ecc128098838cc4b087b17eca2c47d56489e049618d5dbad3e338544afc871ea6b50734485b8329839c6a33dbde4eec941a5087cfcb820c74d837a96e78684598bb31e25c2e33a7c41c85ee5049eef1af7d7acfcc2c5ad92c38385de85d43803cfdd896f5f9c9ae3ee9057a0dcd00e70e3d115b0908b7b9d270af9c83cac47abc4afd4"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "de7f3bfc8837c085c8c72e684ed8db4458fb174c073924060bd95b128009eb996bd8118f5a8067310cacc51588adb3d23af837ab1a7d9810ac5c98525c655f3a34357fce72"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "3c8e68b98a7446390b49117e761fbf0c72d7a17dbda7d6cb996d412dbb406b4a"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "9e5022eb2710ce0e3823eb095a2ec0"}]}, 0x13d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/120, 0x78, 0x7fff, 0x101, 0x3fa, 0x1000, 0xa000}}, 0x120) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 02:59:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 02:59:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) 03:00:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 03:00:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x1}) 03:00:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 03:00:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x511000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000000c0)) 03:00:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r5, &(0x7f00000063c0)={0x90, 0x0, 0x0, {0x4, 0x2, 0x1, 0x8001, 0x8000, 0xffffc000, {0x6, 0x9, 0x7, 0x3, 0x3ff, 0x3353, 0x400, 0x5, 0xaf8, 0x6000, 0x5, 0x0, r6, 0x6}}}, 0x90) 03:00:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x1}) 03:00:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfd, 0x329600) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x50}) 03:00:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)) 03:00:00 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 03:00:00 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x240040) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x800, 0x430080) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 03:00:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x1}) 03:00:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 03:00:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, {0x7, 0x8, 0x20, 0x39, "94946bc4f0386d221376fbd6d048c689eb12e5a4f96e2a878cead7313823635a25f08ef57aaae8b197aded1ced8f89f91f8b4ba0fba442ac83"}}, 0x45) 03:00:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff}) 03:00:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff00000000}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:01 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 03:00:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)) 03:00:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 03:00:01 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0xc16f6a55b534451b) r0 = socket(0x2b, 0x2, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x62, 0x2a, [@supported_rates={0x1, 0x6, [{0xc}, {0x18, 0x1}, {0x24}, {0x1, 0x1}, {0x4}, {0xb, 0x1}]}, @prep={0x83, 0x1f, @not_ext={{}, 0x7f, 0x67, @device_b, 0x3, "", 0xcee, 0x7fff, @device_b, 0x8}}, @preq={0x82, 0x30, @not_ext={{}, 0x7, 0xa9, 0x1, @device_b, 0x3, "", 0x200, 0x8000, 0x2, [{{0x1}, @broadcast, 0x7}, {{}, @device_a, 0x6}]}}, @challenge={0x10, 0x1, 0xbe}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8, 0x700, 0x5, 0x3, {{0x20, 0x4, 0x1, 0x2d, 0x80, 0x67, 0x0, 0x80, 0x29, 0x0, @remote, @private=0xa010101, {[@cipso={0x86, 0x3a, 0x3, [{0x6, 0xc, "f6d7026effc247c5aa00"}, {0x5, 0x6, "b29f86cc"}, {0x0, 0x3, "d1"}, {0x7, 0x8, "554813861ebc"}, {0x6, 0x11, "67f06169ebb0ddbf4cc027c2e901ef"}, {0x7, 0x6, "60da7732"}]}, @timestamp={0x44, 0x20, 0x7d, 0x0, 0x7, [0x401, 0x1000, 0x4, 0x7fffffff, 0x80000001, 0x5, 0xffffffc0]}, @noop, @generic={0x86, 0xf, "147a5a8f77f9009eab046e05e8"}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc4, 0x13, 0x200, 0x70bd2d, 0x25dfdbfe, {0x10, 0x7, 0xff, 0x3f, {0x4e23, 0x4e23, [0x400, 0x40, 0x10000, 0x4], [0xa40, 0x9, 0x0, 0x3eb], r3, [0x5, 0xd9]}, 0x80000001, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "1790626a24b52c655bbedbaeb6f7032a0c3d8a5ab87c1e8fa8238a9d25ec83387e7969c2527edfa62d6e4d"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "170df4bed2c1e546c94dc11827ecc5b12661ad48cff91c345321c12f2d23aaeb01c60c8af3ccda35742c4e760a45a38fbfe2140a9fb74b619c7972c433431e7782f3"}]}, 0xc4}}, 0x40804) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff}) 03:00:01 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 03:00:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 03:00:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r5, &(0x7f00000063c0)={0x90, 0x0, 0x0, {0x4, 0x2, 0x1, 0x8001, 0x8000, 0xffffc000, {0x6, 0x9, 0x7, 0x3, 0x3ff, 0x3353, 0x400, 0x5, 0xaf8, 0x6000, 0x5, 0x0, r6, 0x6}}}, 0x90) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff}) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4000000000001, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffff, 0x121303) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r5, &(0x7f00000063c0)={0x90, 0x0, 0x0, {0x4, 0x2, 0x1, 0x8001, 0x8000, 0xffffc000, {0x6, 0x9, 0x7, 0x3, 0x3ff, 0x3353, 0x400, 0x5, 0xaf8, 0x6000, 0x5, 0x0, r6, 0x6}}}, 0x90) 03:00:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x7b8c927313b0aebf}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) 03:00:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x9, 0x1, 0x21}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x400, 0x8, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20004910) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2b, 0x1000, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6af}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x40}}, 0x8c0) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r5, &(0x7f00000063c0)={0x90, 0x0, 0x0, {0x4, 0x2, 0x1, 0x8001, 0x8000, 0xffffc000, {0x6, 0x9, 0x7, 0x3, 0x3ff, 0x3353, 0x400, 0x5, 0xaf8, 0x6000, 0x5, 0x0, r6, 0x6}}}, 0x90) 03:00:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x7b8c927313b0aebf}, 0x14}}, 0x0) 03:00:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) accept4$netrom(r1, &(0x7f0000000040)={{0x3, @rose}, [@netrom, @default, @rose, @netrom, @default, @bcast, @netrom, @null]}, &(0x7f00000000c0)=0x48, 0x800) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r5, &(0x7f00000063c0)={0x90, 0x0, 0x0, {0x4, 0x2, 0x1, 0x8001, 0x8000, 0xffffc000, {0x6, 0x9, 0x7, 0x3, 0x3ff, 0x3353, 0x400, 0x5, 0xaf8, 0x6000, 0x5, 0x0, r6, 0x6}}}, 0x90) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7fff, 0x1}) 03:00:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) 03:00:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xffffffe1, 0x200, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000180)={r2}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030227bd7000fedbdf250300000006001d00930a000005"], 0x64}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004380)={0x2020}, 0x2020) 03:00:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x9, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7fff, 0x1}) 03:00:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7fff, 0x1}) [ 1476.186982] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 03:00:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:01 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) write$FUSE_LK(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, {{0x401, 0x8000, 0x2, 0xffffffffffffffff}}}, 0x28) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000b80)={0x10c8, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "1f52680b22943efbe55ac53965c1c997d59efc3a530ad78d52fd8321c65fb619b2e1076107387cc05b4347eeda"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "3f6448ca18f0a62765b1e8c8e0a91ac4addd1de3c7435f9ee32085b7db462eece12e9211353cf49fa4b5fb99fe244caedbf714534057cb84998bc9b2191acc1f70d365f735a9b5d9005747e8280cd650dd43bcd1c955e68995b17e7937"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "ea7c62e9f5af9c5f7adf3e02830551b387dcaad23d8a48850552794bf31623816c4666e7dbec9a2d440c967d9dac6ad4dce493ac1dc90339e4704f2c13f89e76bb1f62c44b4a041658b96d0acf833fec04d8ccafae1488fa754de2d2eecc2725b1c20a7ae17bf4a8b4065d402160aa67067c5a9ece3b252529078ee5cd51295e2db35f272d70e4c1a9fb237821397491881c0a893e2be288fc923b28dcb56644021cd04573ecb0f3e1cc96b8905dc87b8d75b63ba6f9727d08ab351ce648c5b87baf87d29347ded2da92aa578eaad8c794227047c2416502c290e155b699cab55cbb20b34029da51de02c730f7f65acbd3a23eec27bc6ddcda0c949568d1aa001b6ec946eda5553b79fd543b212df0e6024d0ef4470598e6d5921b3f577a813c098bd416697b2840c8df49d9fc50e3a922ac8037251762049e5f76e96e807af6d74d0097e651a650bb094cb369bca02c8a6811c8158776b56e8395abf63194a0e44c0ac1f1431536e3a7ea928f5ff3a2f64b89838081dda65a51daab8f4df0a561284e1c95122bd3fbcfd6acc96b768096c077d3724be1762ffb7c7b52936cee45d5c1584d96d99ee9aa1165f0cfb7ad128d8c20dea90c0e99c68ea538458ae8cef680d8cfe5f457d8cde59addb0e09a5778eadadc6bd530d05eb370b744c48aa99c83787f3e01c145097fbb25f21a1f7189c816dee5f7aae90eb4246f5b3f24e4c4486552d9a536bd8426584245ef8dc75ece682a0e2a0d17bf2c401d4fbf011b3e42ad98fd0031e5f9dec91a4f8ed47d605659aff544da59e3ab6949cfb6dadfcc6259377d5e4a2caa35c7c6b13d4cc02c338a2d98d0208880a76f95e8638aa8ed510677b1e6f095ad8519b047e41b7c8f1f484c39c81b895cf3dda8b2e060e95d3264701baf21b3f1cf7758f921cd89f4d46ce5994c0f434afce9a567e132a0f885c21d776239309c064cff927f70c61184706dd6904eebcb7cff3217f4686f1d086e9bd352c114f706af05e3ad916528954e14f50a1d5e67b2b2eb070f0d4db79f184bc12d7e2cf3d6d5aa2bd54ca7b325c2a462c6fe5480325b718c371c3b42cf3c028ed9d9777fc6448238d7cc9a9affef5fc456ade1f2a00da107fe6b3d4e3162af08e0059fc117bbebf61754238c8605eefeffc3c1c74e9563e404ea909d1497828a4623dc2014a360a49a897d1db88915a4593956c13f9e9870b158ba8973212f83d4491edcbbc99d86cf65d8b7e1990c0f98bb82b1ecdd933284eea751a588c3747991fad336ef2e8c5c030d6994577cd21f4d8129da3df8d2f0f81a8a8cbbbd8ce9071990fe65a645946c9ab1c19a4a932dd0bdc547fc7d943264bcd1d375b4820c74f5d65e0c5f26baebb3f8a189f07879ac13eea295fcf6880eb9b4442a6040c806ed35137b1e6187a5cec58a12632c385c7aa86f296816191b22680c72587d00b0a965e6222b283949aac862ade60f9c739f0524ff8a0c20a5c31a73cfd4531c2f7ac78c7ebd81a256e328290dcd8439b1635332ceffaf80c0f0a7050644f0bf45cc408274887d03767458b3f27d7a342f31914584fe9fc87e4ec6830b62badb17bd7d1a82e487fe78b789f29d2f5a90eb094a1dd9195d87eba41b647a960d417eb5617b062c2207014ffeab557e084fd375a63c80bee4673bcf6fc2ccd5db1d4bf8b6f1a1ee351fb0254e14ba538eac7187c100944e09d03c59ecb8384c3084c27e42def84462b0aff3dc1a20af7c9d95d0e8b307be3f86a348e55d11a49f9a2c9ee266fb8f1ec312038e2029c3ac500c51ea1fb9e3ff93279e5388a789c56668f880f46fbbe886e02da6d97a48e9cbeb7b2665183a2090a966b237fe8038d1b06aa5b42ae2389e86ce586988c4df717a962d7a7785cd8ff00d834074cefa0365a43a29dcfad5fc2774156aa9680bee13c5ff9cf400bf9a3fb94395b5815653abaff8d5c7bcd66c63194db5e2cfb968bc095e8abb89e2f23bc7e8eba2a6105f30ad210608cf31b1ab772b20537896d0024503f6deea310d979f63952ddfc52c2cf489499d24596ee45988f9d7702e14730c385589129f8eda3a986f433d28d7ca4e438a9d1a1e6fa8f43b85c448e5ec07746a20722ac95057009865de95290e986807d8e2931b42930cdd3ddae4c3ec1b56781f5fce8017de9c9049deb5adb4699c4f4fc5fe786b2dd85feed23bb696232e407d7203ed4c43b1001c8dfc555dc1c2d932c43ef40b44a2083b2777fae4e49f0d3bb1206a46573a1283cac88de65eb0aaa998d80c725db59795a4a007577e0e146391f213f11e908088c32669bb9779ac21c81c390944071cf17bc51ec9f2b1d4f760d4dd7b2f7e8d1d8a36ebe9e28495dc483d2b38d664f0f5b927dfc1c284dff005b850f1a1537d31644437db9d43c8777e5ceea781f0525612a813f45dbd3a0d483decd8bcabdc935b924b45d2f027ba3911101845632c369f9dce13e1156b1da4faa20914c358b51cd18964a168ef704c9431cba056acede3e7e4fc833fa58796c7fa561203cfa912b5010fe4d2471a0e94ed303c2cb04a9d6c621f3c2a9ce49ecfcfb4c51991983b03c07914660d38c2d4b39c401fcc21cc0a9aeb2eaa75e0f104c59854290019e0c6122682c70508cbcfe47c4ae55a3c477719993748cf638d976c3410b13d3f1f69076f50ff02831e7a79f31ec56afad0adf15536bddec45be8ade370f73e1a71b396cf349865fed99872634988e715e26aa7667f10fe0c6215cc1b4559a465c4b32a4466fcadbceadbb47866b7be269a6f334ba19cdfbc783ef62d61c58508d869fbbfa4569301c91ea950f20a61bf6215fa084f307be2441b044ce02d4fcedcaffdffc0031b74ecd5ac4e813fe3ac2eb2a18ba9a55ece5b7da1c96a03ecd9cda81311f00c8843abf035dfb09afca71a41c9751c1d27d12cad23c76bd59bf487c5442c6d80b53afebc3e77a8009f55e020efc7ed7e867f638b250a9dd984abb7f5193354358258740c4758a43167dafea4b32d7dfbe765d64be6c219da2f38f2f42b82368798946205039a0d70a0107bd6ff2a9d907c75860bc6bda51fe2f7f7260bb31710f0a30250f3f186783366926b977b6e41d3171f44dfca9d5c0bb2de6f50061629b996e56f882ad1ddef4806cc0ba9527a5f3faffdccd208e63f814c032acbc44dbda7d9b2473b357db600cdf633ee70784df3d6a799d9ce7f27ebf54dfedd8ce40dc31f6f54dbb0d02208f5bb71bf83a0f3212c3dc74ea1fe7048f1668e3ece721ddd2a492523b9bc5aff82e09d71ce2a1ad18098c8f18a8c2d583966879c6643d761e33cc6682a980b3a9256d92542d99d5935a1c5523a01b6bc266984912fddefd2139456c56049c768929cf29c72fabc191f6e62595c74da798f00b39800c515f5f9c47c23eec924cca5541468add36b366431bac8b39e08db133b4f1490aac93f4939a807dc7140ae029211395d8df1e1a7c7e8471b8692132ca4921a4374499ee603c129b0f8985229f809874fe58d472e51a399dc0e1c0eb20d3b5ba855fe7eb928f0ea9873e1102e3e586189a311198f8795b732749828b364c56786d677278b490ae362b6950a559db37eee8bf170d8ec8b99345535e7bc2000d7bc315cdefce0b52d0560240bb724b12fdbae2e951b217786e93ec532687da041c7612ce4ef29e8bafbeb4b906d346ed6cde1251b7ce889a6957966e8ea8f559a285e4e8a2ee1ef46911eaee56fc8f52e368eab4b50b55ec1c94d239410a6ade3a9fb3d6809544e12f3581bf5ba5975cfb5289642a31c8be7f88abeac92e98182e8620d6af3a2a863c953f3e8fc02033d93172a2cca6f4445e0611cf7a31bc5666fdfe565edee208d79826090b7dfd20f162ad920eacdc6da04df308a47557a400ee77aef4c31ebb0097c1e98e4b237d9eb24ca858980e596097a6bd93639f170717946146983791b3066da2a944be034a859ed976c6b13a7406d68747aa5a3caa8a821d6df60165d77239e3cb3c7c953521b710bdbc9b3be1444e1710ee2f0767c98560847625dac049f3f92289b6b10ba1554038b8903b63923d741de6b12fbbbdaa4458bd0c33977b8825ca45b4ed93a1c7f7ac7f52f91450266a04bfd07c4a0536bd69575d9177d234ca575ae177b0dc3ccbd00d146d89f21b0555b42f5db128c89797f6985b68004c550026b0fc45c86bb420bb9f5e365800f1a528194321a82ea3ec12135a58ea7caaf9495b737602cf805d350487c0154fcf0906b77d3d52c20d3e466f0b5a429acd5df5bbe27137a1ede2106f99f4e115832d434c6c884b46314bf3187c2074a286d6b48734ffd625aeddc52cb94a2c27907cf266623a9f2f8d49b2d95c4a0d8c0926c842df3b035ef4f2882f9f36c94325049ef2272a8519a2a34ccb34b31f55410af674379198eb2e58fdc1a90219cc7f3f7ee02f1e6323ce04c956c656dcf2e2cde92ea0087ac4a7d32176af78ead9f3e7da4330b0a97fa7c5b7d2335f1690d1ec5fd2de272cfe887f80cfcc2554356b42215f0dedc3aa7bbe7e88b42c4ebb11e89c918c2bd38a70662080f1a30e7edafdf58063822aa11ea23fa00870214657fe248b0cac1c6ce3af31fe2fef2b23bda55417961339d94015a22633cd51c49b749063a2dfb6b6ec3f0704ee93f62d53fbf61dda78a20e41281ca6ac3f342fa5434d7715ae0aee02e84037768242442cc8830aee32ee3c848dcfddf4417025231e6a1367c4d8313e2a1610899a4d06308e7e7c43bda2a253b811432036f8a2c160381c80d9773d623ab1a62bdc69cce8b4aa1d7b5f360a31c6908f84bf6fbc75c3ed723ab4bd4c9a94b603dadd3d543a8d2825c92a8a88329de4974e21b2de9530547f785277ca3d6450f3b3779d3da1c00b573aa7ac9d82fea55b9006295d67e508e26aaf4313e3344eb9fc5669b2c8f8a9bc5d39d627e33d7254286d2b243910b2e314054a125d8e0538b458968b4b17ce90c511e2c9c63b0cd3660223e57b0886dbc8625ff5b94d3a0fa025d8672a4f93fe24db985e5ed2c7526ceed04b3d8abce253a2d4562efcb76aecf44035c4dd6c8098cdccaeda150b9a9060feed4d66240680e1027e89b98247ae19814f3e39c5e740ba86d57f7499216acc351a64363a60fd8b6f90947427bb48115c7bc004ac94a4dc2fa87955533dd6a08ef0a39d3bef0d5184d4e7f6e349d9a0d70029682a5facc9d44a864d6e125dd859367b02cff750cc897f8acacd83ce0764d7d324227b9a0d6c1a7d8a3f95b6d2dcee48a84442e8d382dae670c04e5da9d2a88cd6d52800cdd30118bc8b1510c9594c70b21749b4c7fe8dfb04a421cd13372f0c0363e393cd84f1d805603887dae978779aeaacb7f2106b39470ac8f8ca378f37ac6784c99c1ccba437d5ee2bfee0fa4fb6d11029f86618c47f63c9056b5dab49230b10647e43f3086eacbfdb0e3aa823f958693ca52ab04e1c132b89bb84bc92917dba29baca42942bdfb614ffee1cb3ce9d78b707717314767987b560f989065a4414d99f89a0b8a11ad3ea7c4101cf1d7bc232afca3290b99cc9b028f4abc926a81a11fb8e0962a7c4e78b59d60a1e937b9224850b0274ac6de7ac9aee99c4f97f13b5036edd379c0dfdbab6ba26380b30b355013ade452f206b62109fb592e2c5cf921eddc4a1870054fdbd66486c6a491fecbe1a6da5dec065e24e1d83c9a8d7e0644f50312bef9bf2437fe1cc5f5072dc460b87b266390913b015089b4872e22544648f9369de929adf12179f74308ec2340ca0000ff2e1c24495a"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4c811) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x44803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='iocost_iocg_activate\x00', r8}, 0x10) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x1}) [ 1476.261293] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 03:00:01 executing program 5: r0 = socket(0x3, 0x5, 0x9) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x9, 0x3, 0x4, @private0, @local, 0x40, 0x700, 0xffff, 0x5}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x11, 0x1f, 0x5, 0x8f, {0x4e24, 0x4e21, [0x2, 0x80000001, 0x10000, 0x60b], [0x9, 0x5, 0x5, 0x8], r2, [0x9, 0x2]}, 0x607, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "1549bb7ecb2a5282b81188a6799edd6529a1d7405a900ab83d"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 03:00:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x1}) 03:00:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:01 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) write$snapshot(r0, &(0x7f00000000c0)="e9528b3375d257eebd280fb02508f70935bc7538c056a86115211b7fc3ca7f2dc1ef49282c8b1ec63d74d157bc4bfc3f1eedbd68d773b3801aaf4c1a406db555f5798a7fb395f998d2d8c155366b88f08a5e1faff00a3e1a50f5a0696738cda94753b45754b9d05033eab78930d8c57c207172762c272ed31fc4216f95221450d7275cbeab0cbb18e37e726b14455858429890ef4d1a499813d81a9bb0c97a81427fc53cbe8e085ca89d62c16a45b1de12e5aa21b5821b8cf50fae91ea6b1a0e19dc8312a17f5dbf72f60ac9f7cf9f799b90d0b4ae60735201594375481d96f8b681", 0xe2) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:01 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 03:00:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x1}) 03:00:01 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/161, 0xa1) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x8280) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 03:00:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() 03:00:02 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 03:00:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff}) 03:00:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fddbdf25010000000006770002410000001000137564703a73797ad8da091529264db729f0f8f6633939aad7a9f950682540eea6cc2255abfbe3212f701656184602c7444bfe6d4174aebd8e2c648646dc28c573135dba69128b86a00bd8b0dcae0a34ee0d7dba4f082c14b944eeae024eb6f35724a4392ad619f129515ce6682fc82c7a45cb38e553687944d1b2e1"], 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)) 03:00:02 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) 03:00:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff}) 03:00:02 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) 03:00:02 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) 03:00:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x107185) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x80081) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:02 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 03:00:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff}) 03:00:02 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002300)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000240)=""/117, 0x75}], 0x8, &(0x7f0000002380)=""/183, 0xb7}, 0x40002162) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000002c0)=0x3, 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000037c0)={'ip_vti0\x00', &(0x7f00000026c0)=ANY=[@ANYBLOB="000000008000000000000000000000007be0ffff27192c7bdd512621c53b8fe9b4b28a55cb69ea7c839b0404bc1fa07ccb31b9766c153c6c1387cf647c40b71f00f6183b2b72cc7f6a57", @ANYRES32=r2, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003880)={'syztnl0\x00', &(0x7f0000003800)={'syztnl1\x00', r3, 0x2f, 0xff, 0x40, 0x7, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40, 0x20, 0xfffffffd, 0x8000}}) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000002480)=0x6, &(0x7f0000002500)=0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 03:00:02 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') 03:00:02 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) 03:00:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x7, 0xae, 0x2e, @rand_addr=' \x01\x00', @loopback, 0x8, 0x40, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'sit0\x00', r2, 0x2f, 0x7, 0x5, 0x7fff, 0x45, @loopback, @remote, 0x10, 0x80, 0x5, 0x3}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x107185) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() socket$nl_generic(0x10, 0x3, 0x10) 03:00:02 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) 03:00:02 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 03:00:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x600002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x895) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x8000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x5c, 0x8}) 03:00:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x107185) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:02 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:02 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x3000004, 0x2010, r0, 0x83000000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() 03:00:02 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 03:00:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x107185) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 03:00:02 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x6}}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:02 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:02 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x107185) 03:00:02 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) 03:00:02 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x107185) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) 03:00:02 executing program 2: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x101000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x20000082) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) 03:00:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5eff, 0x410082) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x589642, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x1ff, 0x9, 0x1}) 03:00:02 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:02 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 03:00:02 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x107185) 03:00:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) inotify_init() ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:02 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x107185) 03:00:02 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x401, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x53, 0x5, 0x1, 0x0, 0x0}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r3}) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) 03:00:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:02 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x40000000002, 0xc6943) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "608db0cdae982e6c3000cdc5c3fe71a0"}, @NL80211_ATTR_SSID={0x11, 0x34, @random="f4cf07f644ec20412924eae5b1"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMKID={0x14, 0x55, "d8b1d141f532e38eef0ef6142c954f91"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "9b184dc7f6394230e13196840bb1a643"}, @NL80211_ATTR_SSID={0x23, 0x34, @random="3f64f4cc45fb3656c24e41c9126b83fa291e8c0835124f3bb0d773b527236d"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x4000045) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) 03:00:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xff, 0x40) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2}) 03:00:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) 03:00:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x6c1, 0x4) 03:00:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:02 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:03 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002280)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f00000022c0)={0x90, 0x0, 0x0, {0x0, 0x1, 0x7, 0x8, 0x5, 0x7f, {0x2, 0x81, 0xfffffffffffffff9, 0x3, 0xffffffff, 0x1, 0x70, 0x0, 0x9, 0xc000, 0x7, r3, 0xffffffffffffffff, 0x1, 0x6}}}, 0x90) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = getegid() write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)={0x160, 0x0, 0x0, [{{0x1, 0x3, 0x9, 0x20, 0x8, 0x9, {0x0, 0x80, 0x10000, 0x2, 0x4, 0x100000000, 0x3, 0x0, 0x7, 0x8000, 0x0, 0xee00, r5, 0x20, 0x7ff}}, {0x4, 0x242d86e2, 0xa, 0x13cd, '/dev/fuse\x00'}}, {{0x4, 0x2, 0x7, 0x7, 0xfffffbd5, 0xffff9f86, {0x6, 0x1, 0x7, 0x7, 0x10001, 0x368b, 0x5, 0xa888, 0x7, 0x8000, 0x6, 0x0, 0x0, 0x80000002, 0x2}}, {0x0, 0xfe, 0xf, 0x4, '/dev/dri/card#\x00'}}]}, 0x160) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f00000020c0)={0x20, 0x0, r6, {0xfffff8e1, 0x4, 0x0, 0x7fff}}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x41, 0xa100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x2, 0x6d, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x9000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x1f) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x20}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3f}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24040001) 03:00:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000004100)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getegid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @private=0xa010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400a800) geteuid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004140)=ANY=[@ANYRESOCT], 0x298) 03:00:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 03:00:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1, 0xa6e, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000640)=0x6, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2800000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000140)=0x7f) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r1}) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x408000, 0x0) 03:00:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x9, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/bsg\x00', 0x181240, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000040)=""/98, 0x62}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001100)=""/35, 0x23}, 0x100) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) geteuid() ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 03:00:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x801) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x1, 0x8, 0x1}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x8, 0x5, 0x80000000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1, 0xa6e, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000640)=0x6, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2800000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000140)=0x7f) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r1}) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x408000, 0x0) 03:00:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x620800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3f, 0x6001) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x80000001, 0x1, 0x7ff, 0x1020, r1, 0xfff, [], 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x40) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002200)=ANY=[@ANYBLOB="b800000000000000", @ANYRES64=0x0, @ANYBLOB="00000000000000000100000000000000090000000000000002000000000000001f000000ff07000003000000000000003f0000000000000007000000000000000400000000000000060000000000000006000000000000000600000003000000ff00000000c00000ffff0000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0400000004000000000000001400000000000000e089ffffffffffff09000000030000002f6465762f62736700000000000000008d81704b434d4a7c01ee83f545796b9120d8a9cd1ff79001d3272619c1ed3bf584866c62"], 0xb8) read$snapshot(r2, &(0x7f0000002180)=""/71, 0x47) 03:00:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000eeff0000000500f8ff0500050000000000d6da6f424b8ab507dfee4414aef78de6cb5b06fc6f47fb654e470c8d9cc5a9f8b65e2562f1f70aaf4f4c229c8f8476b9aa3caba8274ad8bb05230f82615df21ed6e9c90cbcc36fd5f9c621d7944e"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004004}, 0x6000040) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4ae, 0x4201) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff4000/0xc000)=nil, 0xc32, 0x3, 0xb8}) 03:00:03 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x800, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000140)={0xb, 0x1}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x20, 0xe3b, 0x10800e0, 0xafd4, 0x4, 0x2, 0xd64}}, 0x50) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000180)=0xfd) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x8, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:03 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x1, 0x0) read$fb(r0, &(0x7f00000000c0)=""/122, 0x7a) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:03 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:03 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7ff, 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80, 0x40) 03:00:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffb2c, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 03:00:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:03 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3, 0x4}) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffff, 0x400020) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x8d1, 0x4, 0xd}) 03:00:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xf35a, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:04 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x200180) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) 03:00:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/199, 0xc7, 0x10040, &(0x7f00000001c0)={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x956, 0xc78}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x10000) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x4, 0x1}) 03:00:04 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0x0, 0x3, 0x4}) 03:00:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x3d, 0x4, 0x8}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f0000000040)=""/39, 0x27, 0x43, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) recvfrom$netrom(r3, &(0x7f00000001c0)=""/110, 0x6e, 0x40000000, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x2, 0x1, 0x1}) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:04 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0x0, 0x3, 0x4}) 03:00:04 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1c7, 0x410081) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 03:00:04 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3f, 0xfffffffb, 0x6048, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1000, 0x111600) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0xc040, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x401, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r1}) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0x0, 0x3, 0x4}) 03:00:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000020, 0x8400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:04 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x0, 0x4}) 03:00:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0x0, 0x80000001}) 03:00:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000020c0)={0x90, 0x0, r2, {0x4, 0x1, 0x7d75, 0x9, 0x2, 0x8000, {0x2, 0xcc8, 0x8, 0x1, 0x7, 0x5, 0xffff, 0x212, 0x4, 0x8000, 0x1f, 0xee01, 0x0, 0x3ff, 0x5}}}, 0x90) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x0, 0x4}) 03:00:04 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x22000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x401, 0x5f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x0, 0x4}) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x181000) r1 = userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:04 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffe, 0x86180) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:04 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3}) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x100000000, 0x0, 0x81}) 03:00:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x101000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f00000000c0)={0x9a}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:04 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9b, 0x240000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f00000003c0)=0x10) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000400)={0x1, 0x1}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000001c0)=""/34, 0x22}, {0xfffffffffffffffe}], 0x6, &(0x7f0000001480)=""/19, 0x13}, 0x0) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:05 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3}) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0xfeb, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc, 0x4, 0xfe000000, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x10, 0x3f, 0xb8, 0x0, 0x10, @mcast2, @local, 0x8000, 0x10, 0x700000, 0x85}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000040c0)={0xffffffc1, 0x3}) 03:00:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc9ff, 0x224544) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ff9000/0x2000)=nil, 0x6, 0x5, 0x10}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @default}, [@remote, @default, @remote, @remote, @netrom, @default, @rose, @bcast]}, &(0x7f00000001c0)=0x48) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x6, 0x3}) 03:00:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc0000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:05 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x1000, 0x4}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002180)={0x20, 0x0, r2, {0x128, 0x0, 0xfff, 0x9}}, 0x20) 03:00:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff5000/0x4000)=nil}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe235f555d16a6146}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3f}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x15}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x8810}, 0x4000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xa613}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'rose0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c04) 03:00:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x259, 0xc8180) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9f54, 0x800) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0xf}}, 0x9c, 0x97a3, &(0x7f00000000c0)="6d3cc00564eb0a7b813ceb086060e61d5ecb08ba90bc0faacc6536579bddc7b65b58cdb6f1697c30927e47d05ede909f40541f768a0cafd322b91e14a524224be67a0fa9eddf1f754ff7732ba2c383bdfa5726c29b2659de251f467087fd2b29e1ce6fc7247d2564f8a6b7eaea90f0628d72909bc359518052b604c8a9038b2ba6ae82a39d8a7d74a22d6a31d2b3112f8ef3424e4371d14e2b7a9322"}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:05 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x80400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x134a, 0x400) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000000200)={0x122c, 0x12, 0x300, 0x70bd2c, 0x25dfdbfc, {0x23, 0x81, 0x2, 0x8, {0x4e20, 0x4e23, [0x6, 0x81, 0x40004000, 0x1], [0x6, 0xfff, 0x900000, 0x5], 0x0, [0xb4, 0x40]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "c5952463d786e4321a201c8bb4c1338cd58625ec3777b3c39bec797c2128b336e4147dc19bd4249a49d69e900f61039b7eb898cd6bbe0fd4c14a79bcb3f987598f8cbc93253ec87dceb6cb4b3c7b149de1b8a6de4f8ab3c0cb9a120cd972f5521ec18817748381870c9f9db18429a3d293b9569f2bedc1995a2d8e"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "9b239a9ac12b2993019c4102e13c0ca6a3f55aea518eb189a988bc88f0c08e1bfe0ca647f3bbdb6257fcbc0e606555b6fa3cb8a64f35671d791e234e60329f6d9998856c54"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "c96d0d08aa482306a086c08b59a82e9be3f5e500a433af3c6f37dfc1b081f5f0a90d887a7b2923c0dd72cda26e477e799f5cb33a6102faf0c6a66f1ccc95db356ec3a5b4ec13"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "d190002bd3d3c1773d0e4801edd2d05a0b536da0977751bf490edcbe17b8837456cca98b48722f2d675a2d62c45fb9bee543ddf95a17174ec3efac019b09a9aea412a12749b9b57ccc7b60f6f2e1b52b79457799efa1346994564690cd86def0565e8ecf6b21210c56654804be78d0d05f722783c855ce590ff2dee457cdadf45bc7ca96cd70afa3b856f6a103235ae0aa14ccbf832958d439efb2893dd6ddf5ecb610be911a6d249817b21e5b5d22119454d8f3ca30c704730d80e6a3f6"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x122c}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000400) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x7ff, 0x8001, &(0x7f00000000c0)="9ae215a7fb612763bb85c46c3a371f19968575ef1bb36c8fb64cdb69cbb94dc0601be4cca05005e13cf6cb3bd2bc9a25078e4caf336c5d9e59ab0640a0fd379ce2f9109789ec2bf5b558ae47750dae084cd0151071893884162117680b47cc6930056bb00f8a3ca72995b91126a1948167971e50b684ca96665c6d44cb80bfb1947bcfaeffd8ecf39e3182b879911111ffebbbd8ac3ce4a60842ac2deacfb2266ecf2c368459c3002d64354c3575"}) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 03:00:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x80, 0x5, 0xc0000000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x6, 0x40) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000000c0)) connect$netrom(r1, &(0x7f0000000140)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 03:00:05 executing program 0: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x4, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xe39, 0x4680) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) 03:00:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 0: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:05 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) 03:00:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x420ec5) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 0: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:05 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) 03:00:06 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x16000, 0x0) getpeername$netrom(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@default, @bcast, @bcast, @netrom, @default, @bcast, @null, @default]}, &(0x7f0000000140)=0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x4, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:06 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x0, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x4, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:06 executing program 5: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000001640)=""/83, 0x53}, 0x10102) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000001700)=0x7ff, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000001740)='/dev/bus/usb/00#/00#\x00', 0x1, 0x408102) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000001780)=0xfffff732) recvfrom$netrom(0xffffffffffffffff, &(0x7f00000001c0)=""/78, 0x4e, 0x3, &(0x7f0000000140)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x214582) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000001dc0)={'ip6gre0\x00', &(0x7f0000001d40)={'ip6gre0\x00', 0x0, 0x2b, 0x67, 0xd1, 0x5, 0x26, @ipv4={[], [], @multicast1}, @loopback, 0x10, 0x8, 0x8, 0x98e}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e80)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, @alu={0x4, 0x1, 0x8, 0x2, 0x5, 0x67cc85110ee1db09, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x96}, @exit], &(0x7f00000004c0)='GPL\x00', 0x7fff, 0x60, &(0x7f0000000500)=""/96, 0x1cbc0c3945211d1b, 0x1, [], r5, 0x1b, r3, 0x8, &(0x7f0000001e00)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001e40)={0x2, 0x2, 0x6, 0x5}, 0x10}, 0x78) accept$netrom(r3, 0x0, &(0x7f0000000400)) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x98}}, 0x40) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) accept$netrom(r6, &(0x7f00000000c0)={{0x3, @bcast}, [@remote, @null, @bcast, @null, @netrom, @null, @default, @default]}, &(0x7f0000000240)=0x48) 03:00:06 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x0, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x4, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:06 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x8040805) 03:00:06 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x4, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:06 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1}) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x8, &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x0, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x4, 0xff}) 03:00:06 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0xd093e000) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) 03:00:06 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x2, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5, 0x50}) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:06 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 03:00:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) 03:00:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:06 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x303000) 03:00:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) 03:00:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:06 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x800) 03:00:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x50}) 03:00:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) 03:00:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:06 executing program 2: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x800) 03:00:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7fff, 0x1}) 03:00:07 executing program 2: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x800) 03:00:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6441, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 03:00:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6441, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 03:00:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:07 executing program 2: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x800) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:07 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) 03:00:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6441, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 03:00:07 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) 03:00:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 03:00:07 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) 03:00:07 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:07 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x7000)=nil}) 03:00:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6441, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 03:00:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x7b8c927313b0aebf, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 03:00:07 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:07 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:07 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6441, 0x0) 03:00:07 executing program 2 (fault-call:0 fault-nth:0): syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0xc000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x0, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r3}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:07 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:07 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x0, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) [ 1482.166164] FAULT_INJECTION: forcing a failure. [ 1482.166164] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.205547] CPU: 1 PID: 5407 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1482.213476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.222844] Call Trace: [ 1482.225474] dump_stack+0x1b2/0x281 [ 1482.229148] should_fail.cold+0x10a/0x149 [ 1482.233339] should_failslab+0xd6/0x130 [ 1482.240997] kmem_cache_alloc+0x28e/0x3c0 [ 1482.245172] getname_flags+0xc8/0x550 [ 1482.248998] do_sys_open+0x1ce/0x410 [ 1482.252750] ? filp_open+0x60/0x60 [ 1482.256304] ? __do_page_fault+0x159/0xad0 [ 1482.260564] ? do_syscall_64+0x4c/0x640 03:00:07 executing program 4: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x8100, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000000000046000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x80000001}, {0xc, 0x90, 0x1000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xb68}, {0xc, 0x90, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0xf06a}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2b, 0x0, 0x7f, 0x1dce38e8, 0x46, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x27}, 0x7, 0x1, 0x100, 0x96a}}) capget(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x1, 0xffffffc0, 0x80000000, 0x7, 0x97}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000000) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:07 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) [ 1482.264546] ? do_sys_open+0x410/0x410 [ 1482.268620] do_syscall_64+0x1d5/0x640 [ 1482.272646] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1482.277870] RIP: 0033:0x417d11 [ 1482.281091] RSP: 002b:00007f91fc48b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1482.289517] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1482.297152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f91fc48b840 [ 1482.304433] RBP: 00007f91fc48bca0 R08: 000000000000000f R09: 0000000000000000 03:00:07 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0x1, 0x0, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r3 = accept$netrom(r2, 0x0, &(0x7f0000000140)) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf8, 0x14, 0x800, 0x70bd29, 0x25dfdbfe, {0x26}, [@INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "2150e2150e754a99b087551b06cd63ad5b4d443c7ef7b29f714a9fd628c89f12f25b36ce350d5973e7397daba3d25f4bbbad4a4ffa1e8591bc1a8603182a8e37300cc146e345c7a79bf33972ab8704d86909b47eaa372b109e48"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "fb7d068bd79455be5421a6bcfcaf1ae13a63bdef1cd115008b15f57524afd754ff19c256b205c71f62fd09c8d58449cb7b2f"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "88811bb82c6a3336ba49ba3e48698c5e035c3ba7b3305c7f1de6574342e7631e2bd0a85007f9d14cc1034c229c5b478c0dd658b5830c21ec16f3743485c95bfe20ca08dd1157cc"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0x4) 03:00:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) [ 1482.311712] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 1482.318990] R13: 00007ffe3cdac6bf R14: 00007f91fc48c9c0 R15: 000000000119bf8c 03:00:07 executing program 2 (fault-call:0 fault-nth:1): syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:07 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) [ 1482.428798] FAULT_INJECTION: forcing a failure. [ 1482.428798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1482.440657] CPU: 0 PID: 5432 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1482.448470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.457853] Call Trace: [ 1482.460458] dump_stack+0x1b2/0x281 [ 1482.464130] should_fail.cold+0x10a/0x149 [ 1482.468474] __alloc_pages_nodemask+0x22c/0x2720 [ 1482.473365] ? __lock_acquire+0x5fc/0x3f20 03:00:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) 03:00:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) [ 1482.477626] ? get_pid_task+0x91/0x130 [ 1482.481633] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1482.486485] ? lock_downgrade+0x740/0x740 [ 1482.490645] ? get_pid_task+0xb8/0x130 [ 1482.494560] ? proc_fail_nth_write+0x7b/0x180 [ 1482.499242] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1482.504188] cache_grow_begin+0x91/0x630 [ 1482.508261] ? check_preemption_disabled+0x35/0x240 [ 1482.513283] cache_alloc_refill+0x273/0x350 [ 1482.517650] kmem_cache_alloc+0x333/0x3c0 [ 1482.522324] getname_flags+0xc8/0x550 03:00:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x204, 0x80, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xd99, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000200)=0x9) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) [ 1482.526132] do_sys_open+0x1ce/0x410 [ 1482.529853] ? filp_open+0x60/0x60 [ 1482.533398] ? __do_page_fault+0x159/0xad0 [ 1482.537730] ? do_syscall_64+0x4c/0x640 [ 1482.541717] ? do_sys_open+0x410/0x410 [ 1482.546667] do_syscall_64+0x1d5/0x640 [ 1482.550580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1482.556065] RIP: 0033:0x417d11 [ 1482.559283] RSP: 002b:00007f91fc48b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1482.567180] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 03:00:08 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x88040, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x2, 0x24}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x48000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x92, 0x105, 0x88, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) 03:00:08 executing program 2 (fault-call:0 fault-nth:2): syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') 03:00:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400, 0xca73721b634043e4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xc4eb, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87}) [ 1482.574460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f91fc48b840 [ 1482.581827] RBP: 00007f91fc48bca0 R08: 000000000000000f R09: 0000000000000000 [ 1482.589108] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 1482.596382] R13: 00007ffe3cdac6bf R14: 00007f91fc48c9c0 R15: 000000000119bf8c 03:00:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) 03:00:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x47ff, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4c004) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) [ 1482.710928] FAULT_INJECTION: forcing a failure. [ 1482.710928] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.765262] CPU: 0 PID: 5454 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1482.773167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.782569] Call Trace: [ 1482.785212] dump_stack+0x1b2/0x281 [ 1482.788880] should_fail.cold+0x10a/0x149 [ 1482.793064] should_failslab+0xd6/0x130 [ 1482.797233] kmem_cache_alloc+0x28e/0x3c0 [ 1482.801471] get_empty_filp+0x86/0x3e0 [ 1482.805566] path_openat+0x84/0x2970 [ 1482.809290] ? get_pid_task+0x91/0x130 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) [ 1482.813204] ? path_lookupat+0x780/0x780 [ 1482.817270] ? trace_hardirqs_on+0x10/0x10 [ 1482.821524] do_filp_open+0x179/0x3c0 [ 1482.825331] ? may_open_dev+0xe0/0xe0 [ 1482.829150] ? __alloc_fd+0x1be/0x490 [ 1482.832962] ? lock_downgrade+0x740/0x740 [ 1482.837148] ? do_raw_spin_unlock+0x164/0x220 [ 1482.841931] ? _raw_spin_unlock+0x29/0x40 [ 1482.846094] ? __alloc_fd+0x1be/0x490 [ 1482.849941] do_sys_open+0x296/0x410 [ 1482.853768] ? filp_open+0x60/0x60 [ 1482.857322] ? __do_page_fault+0x159/0xad0 03:00:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000080)=""/194) [ 1482.862299] ? do_syscall_64+0x4c/0x640 [ 1482.866810] ? do_sys_open+0x410/0x410 [ 1482.870814] do_syscall_64+0x1d5/0x640 [ 1482.875198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1482.880403] RIP: 0033:0x417d11 [ 1482.883680] RSP: 002b:00007f91fc48b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1482.891400] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1482.898699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f91fc48b840 [ 1482.905987] RBP: 00007f91fc48bca0 R08: 000000000000000f R09: 0000000000000000 03:00:08 executing program 2 (fault-call:0 fault-nth:3): syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf251100000006001200080000000600b500c00700000800a4000100000006001a01010000000500c200ff00000005007400050000000500c200000000000a000600080211000001000006001a01030000009c00be007c0ff2b3d1a8db57021aab4d969495095afa7fab6d808ea9f8b32a81e8e5366872ce2d2799394a5b9f89e6d3912e505c0850b8e6fac82d149015dabf6fabf2df6f9840f644ee4be9b7a8ae49fdfcab546422d589a3d15d1f838cc85d7c09d70fc05c9b98bf8c825dbe0f4fa501188e448781e48fcd9a45e1169b076cafd6019a5d12c1b3640e3ac7d3b57e731c0aca8cebb4545aaa562258"], 0xfc}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000280)=0x81) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xba87}) 03:00:08 executing program 4: accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) [ 1482.913356] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000002 [ 1482.920629] R13: 00007ffe3cdac6bf R14: 00007f91fc48c9c0 R15: 000000000119bf8c 03:00:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:08 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fff, 0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x208a41) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffffb, 0x4, 0x91}) r2 = socket(0x21, 0xa, 0xffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0x9]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x3e}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40881}, 0x20000000) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) [ 1483.024541] FAULT_INJECTION: forcing a failure. [ 1483.024541] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.064690] CPU: 1 PID: 5484 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1483.072579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.082038] Call Trace: [ 1483.085012] dump_stack+0x1b2/0x281 [ 1483.088666] should_fail.cold+0x10a/0x149 [ 1483.092824] should_failslab+0xd6/0x130 [ 1483.096806] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1483.101519] apparmor_file_alloc_security+0x129/0x800 [ 1483.106748] security_file_alloc+0x66/0xa0 [ 1483.110998] ? selinux_is_enabled+0x5/0x50 [ 1483.115327] get_empty_filp+0x15c/0x3e0 [ 1483.119318] path_openat+0x84/0x2970 [ 1483.123129] ? get_pid_task+0x91/0x130 [ 1483.127053] ? path_lookupat+0x780/0x780 [ 1483.131119] ? trace_hardirqs_on+0x10/0x10 [ 1483.135372] do_filp_open+0x179/0x3c0 [ 1483.139178] ? may_open_dev+0xe0/0xe0 [ 1483.142975] ? __alloc_fd+0x1be/0x490 [ 1483.146786] ? lock_downgrade+0x740/0x740 [ 1483.151294] ? do_raw_spin_unlock+0x164/0x220 [ 1483.155831] ? _raw_spin_unlock+0x29/0x40 [ 1483.160003] ? __alloc_fd+0x1be/0x490 [ 1483.163910] do_sys_open+0x296/0x410 [ 1483.167668] ? filp_open+0x60/0x60 03:00:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x63a919bb, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) [ 1483.171230] ? __do_page_fault+0x159/0xad0 [ 1483.175481] ? do_syscall_64+0x4c/0x640 [ 1483.179680] ? do_sys_open+0x410/0x410 [ 1483.183585] do_syscall_64+0x1d5/0x640 [ 1483.187489] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1483.192704] RIP: 0033:0x417d11 [ 1483.196256] RSP: 002b:00007f91fc48b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1483.203996] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1483.211280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f91fc48b840 03:00:08 executing program 2 (fault-call:0 fault-nth:4): syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x95, 0x0, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = socket(0x11, 0x6, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4) [ 1483.218551] RBP: 00007f91fc48bca0 R08: 000000000000000f R09: 0000000000000000 [ 1483.225817] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 1483.233076] R13: 00007ffe3cdac6bf R14: 00007f91fc48c9c0 R15: 000000000119bf8c 03:00:08 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 03:00:08 executing program 1: r0 = socket(0x10, 0x80000, 0x5e) getpeername$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@map={0x18, 0x9, 0x1, 0x0, r3}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x1, 0x0, 0x3, 0xb, 0x2, 0x20, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x0, 0x1, 0x1, 0x9, 0x7, 0x8, 0x1}]}, &(0x7f0000000900)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x5, [], 0x0, 0x1b, r2, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x7, 0x8000, 0x3}, 0x10}, 0x78) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') recvmsg(r0, &(0x7f00000007c0)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/126, 0x7e}, {&(0x7f0000000640)=""/83, 0x53}], 0x7, &(0x7f0000000740)=""/107, 0x6b}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0) write$FUSE_DIRENT(r7, &(0x7f0000000800)=ANY=[@ANYBLOB="500000000e6a272e", @ANYRES64=0x0, @ANYBLOB="0200000005000000000000006c327470000000000400000000000000060000000000000008000000261c00005e2f2d25252ea1e37db2e69c402d"], 0x50) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000129bd7000fcdbdf2505000000050022000100000005000500000000000500130008000000080019007f00000106000200010000000700090097f70000060002000100000060984979c575d603f2dcdb1f53c6b6b96147f0e4c4653ba507546b1b5d"], 0x4c}}, 0x8008) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) 03:00:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 03:00:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)) 03:00:08 executing program 4: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r3}) 03:00:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:08 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x200000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000009, 0x82) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x80040, 0x0) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000002c0)) 03:00:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x1000009, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0x83b2, 0x1d, [{0x9}, {0x1}, {0x7}, {0x7, 0x1}, {0x6, 0x1}, {0xf}, {0x3, 0x1}, {0x1}, {0x2}, {0x5}, {}, {0x9}, {0xf}, {0x9, 0x1}, {0xb, 0x1}, {0x8}, {0x2, 0x1}, {0xa}, {0x7}, {0xc, 0x1}, {0xd, 0x1}, {0x2}, {0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {}, {0xb, 0x1}, {0xb}]}) 03:00:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x40ca00) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x8, 0x80000) 03:00:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:08 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000002c0)) 03:00:09 executing program 0: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r3}) 03:00:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x7ff, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) socket$can_raw(0x1d, 0x3, 0x1) 03:00:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 03:00:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r2 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000002c0)) 03:00:09 executing program 0: r0 = socket(0x10, 0x80000, 0x5e) getpeername$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@map={0x18, 0x9, 0x1, 0x0, r3}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x1, 0x0, 0x3, 0xb, 0x2, 0x20, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x0, 0x1, 0x1, 0x9, 0x7, 0x8, 0x1}]}, &(0x7f0000000900)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x5, [], 0x0, 0x1b, r2, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x7, 0x8000, 0x3}, 0x10}, 0x78) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') recvmsg(r0, &(0x7f00000007c0)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/126, 0x7e}, {&(0x7f0000000640)=""/83, 0x53}], 0x7, &(0x7f0000000740)=""/107, 0x6b}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0) write$FUSE_DIRENT(r7, &(0x7f0000000800)=ANY=[@ANYBLOB="500000000e6a272e", @ANYRES64=0x0, @ANYBLOB="0200000005000000000000006c327470000000000400000000000000060000000000000008000000261c00005e2f2d25252ea1e37db2e69c402d"], 0x50) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000129bd7000fcdbdf2505000000050022000100000005000500000000000500130008000000080019007f00000106000200010000000700090097f70000060002000100000060984979c575d603f2dcdb1f53c6b6b96147f0e4c4653ba507546b1b5d"], 0x4c}}, 0x8008) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x40000) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7ff, 0x7fffffff, 0x20, 0x0, 0x0}) r3 = socket(0x1f, 0x2, 0xfff) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000880)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='{,s\\.\x00') 03:00:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x1014c0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000140)=0x8, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xfff, 0x40, 0xfffffffa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x161000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000015, 0x10, r4, 0xffffffffffff5db3) 03:00:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) 03:00:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) 03:00:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000002c0)) 03:00:09 executing program 2: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x20}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xcc}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x42}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x800) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') 03:00:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f00000002c0)) 03:00:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) 03:00:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xf4b472f74b9cbe40) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000048b8adf7dc4c688e6ad65e22a85036c9968e8703134ee5630673d4c83df6630ad9e64b4c1cc3d6d331854bc678da9737bc25911f07c852", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf2505000000050014000100000008000b0002000000050007000200000005000700030000000600030089740000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8084) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:09 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0xfffffffffffffdf4) r1 = getpgid(0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_LK(r2, &(0x7f00000000c0)={0x28, 0x0, r0, {{0x100000001, 0x5, 0x2, r1}}}, 0x28) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000040)) 03:00:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x20, 0x13, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x1f, 0x5, 0x3, @private2, @private1, 0x7800, 0x700, 0x8ff}}) 03:00:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') 03:00:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) 03:00:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f00000002c0)) 03:00:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0xfff, 0x6733, 0xd21a, 0x102, 0xffffffffffffffff, 0x4f60, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x4, 0x1, 0x20, 0x601, 0x1, 0x8, [], 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x40) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8001}, @generic={0x8, 0x1, 0x3, 0x101, 0x3}, @ldst={0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x98}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x4, 0x3, 0x2}], &(0x7f0000000140)='GPL\x00', 0x3, 0xc1, &(0x7f0000000180)=""/193, 0x41100, 0x8, [], 0x0, 0x1b, r2, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x10, 0xffff, 0x3}, 0x10}, 0x78) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:10 executing program 2: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x2000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10080, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 03:00:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:10 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:10 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x608c2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:10 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:10 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff0000/0x4000)=nil, 0x4000}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, 0x2000}) mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f0000000000)=0x1, 0xffffffff, 0x2) 03:00:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) getsockname$netrom(r0, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @null, @rose, @remote, @null, @null, @bcast, @bcast]}, &(0x7f0000000040)=0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0xb4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:10 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffdfffffffe, 0x103c3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000001080)={0xd, 0x1f, 0x2478, 0x10001, 0x10, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x40) socket(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7, 0x2, 0x20, @local, @empty, 0x20, 0x20, 0x8c61, 0x8}}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001340)='/dev/uhid\x00', 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000001380)={0xe, {0x5, 0x5, 0xff, 0xce, "3928e572dd079f0a219d02b905ec239a8c7b5f1576c77ef6962e1f5a59344bd391bf23a76d39707d13eac395d874c7efd391aac426f036e3094e0e2565c111bfc280a210887e594dc5e0243266a4912228745df98d9d91ff0dd784d3bd8b911e6893ec12685924652e80ffea2f4013fd214f5ade04a6e6d7ac68eec2fc29aebe212d003d58ab2712f4b562dc4b6c8557239c04e3a42bb36290c87eacc8c61905a67a3074d0d821eced28ae1b8ef13b9d7f26548f51026ea19a5bbee1b9da8fc3340a85850fad72032353153c41d8"}}, 0xda) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000ca60040000000000001e0085100000b56b80005d6620987c39f71113e708009500001f0000000000000000"], &(0x7f0000001100)='syzkaller\x00', 0x800, 0x0, 0x0, 0x82200, 0x16, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x1, 0x6, 0x9, 0x3}, 0x10}, 0x78) syz_open_dev$dri(&(0x7f0000001300)='/dev/dri/card#\x00', 0x7, 0x4041) 03:00:10 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:11 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@null, @null, @null, @bcast, @rose, @remote, @netrom, @bcast]}, &(0x7f0000000040)=0x48) 03:00:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:11 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x800) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 03:00:11 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) 03:00:11 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0x83000000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140)=0x80, &(0x7f0000000180)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$fb(r0, &(0x7f00000000c0)=""/68, 0x44) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)=0x3) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000001c0)=0xf7) 03:00:11 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x127}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20048040) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x430460) 03:00:11 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) 03:00:11 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000002c0)) 03:00:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x52}) 03:00:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LK(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x5194c0) 03:00:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x7, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:12 executing program 4: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) 03:00:12 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffdfffffffd, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xad31b84862c49444}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x3c}}, 0x50) 03:00:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000002c0)) 03:00:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xc4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5295, 0xd}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6b, 0xaa3}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x7e, 0xac, "4451efb9f91bdf009e8019fe5cb60ffb5e063fa3a7d96e8dac9c82fcfa3f8fb75080bf5373f6d9a2668e7685093faf651e21fa3094cb47c9ea6f51cf74104d8a806ea9616a01e3471113e58a92d593735f50d0a0c4292b2fd97ea0b3b39a9c8369be2163af32cb864c1bd429ea341b9ed63b5c7a7abb792fa810"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1ca}]}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) 03:00:12 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) 03:00:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) 03:00:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 03:00:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r2 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000002c0)) 03:00:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:12 executing program 1: move_pages(0x0, 0xa, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], 0xf) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x400000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='(^\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0xd8102) 03:00:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08402bbd7000fbdbdf250400000008000c0004000000080011000100000008000b000300000005000600c7000000050021000000000006001b004e230000ed0521a4ce89269482d86d93ca2ed169231a49c148a444d0a74e4012f594b2422de52d0550f1b4617bbf4b41a05413e99bb54ebe3f347b15e8c83f045640b3213997408e08bb85e96eb49e34a7a24b63827bff7b7f99b9"], 0x44}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x6}}, 0x18) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x440, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000240)={0x1d, 0x2}) 03:00:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:12 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x100, 0x40601) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@default, @null, @rose, @netrom, @default, @null, @bcast, @bcast]}, &(0x7f0000000000)=0x48) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 03:00:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x746b, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:13 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000400)=""/114, 0x72}], 0x7, &(0x7f0000000500)=""/118, 0x76}, 0x20) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x5, 0x8}) 03:00:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) 03:00:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000002c0)) 03:00:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x8d510000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8) 03:00:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x84282, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 03:00:13 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:13 executing program 5: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x10001}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:13 executing program 2: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x1f, 0x4) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffdffffffff, 0x0) 03:00:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f00000002c0)) 03:00:13 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x40000, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048891) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000, 0x40881) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}}, 0x80) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x4, 0x2, 0x53}) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000100)) 03:00:13 executing program 5: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:14 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x40100) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:00:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000140)=0xfffffffc) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3b39, 0x9, 0x3f7}) r3 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x2, 0x80) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3, 0x5, 0x48}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0x403f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:14 executing program 5: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f00000002c0)) 03:00:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x21}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x60000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xc377, 0xfff, 0x5}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x4, 0x6, 0x401, 0x40, 0xad, 0x3, &(0x7f0000000080)="ad58a54a012d4d407820fccbd27864baf43d4e0f8b8e01eac2b968b622663e97bfebebb1480ac75fb222df65bcf113156135acf992f4331bce5e587666a88e12cb3a3910743917eefb2dddbaa62463fa7559666aa77877f604a0e0d0576187438205634391b8b8d570ba2a4459d0ab0b3b2b40e47bdcd7289c0467e0674cd150b6aa7e01a05065911be9ea75dd3281160af658a1a2a7f95888c2a91fc3311e2f4346a31bb912e0f0e339ea319c"}) 03:00:14 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7654, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:14 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:14 executing program 4: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:14 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 03:00:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:15 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x40100) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 03:00:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x0) 03:00:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) accept$netrom(r1, &(0x7f0000000040)={{0x3, @rose}, [@netrom, @default, @remote, @bcast, @bcast, @netrom, @remote, @netrom]}, &(0x7f00000000c0)=0x48) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 03:00:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x400002) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x10}, 0x10) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 03:00:15 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 03:00:15 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff7, 0x300) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}]}, 0x28}}, 0x4008000) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x9a, 0x6, 0x5, 0x40, 0x80, 0xffff8000, "2f972a47d42970d5dbb35b88af24ba39110c9de701caf823ede49e9372c2cb3a076d4dea71e7f697fcbc6e623d0acdc9832ea7ae16bb8c00a944a539dbe40f883cebd2bc0fafdc294a3695c53347fe742463aa17e1d2e476b175b93f8c926d53b58cf2c0f8ff5d4c2ca79d7931b17df3b0705be3f62064f8de35603dcb268ae9842ef3bd8089c81db918a5e2cdc601fea3f30228772fe4adbf81"}}, 0x1b2) 03:00:15 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) socket$inet_smc(0x2b, 0x1, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x18202, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x20180, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x900, 0xfe, 0x8100}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:15 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x7, 0x4, 0x1, 0x1ff}}, 0x20) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x29c, 0x15, 0x1, 0x70bd2b, 0x25dfdbfb, {0x31f078e0817db459, 0x3f}, [@INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "fe77add4c97c572081ab521730b5152c578650d7c96f39d522f5b18be8ff8491908422f5c50161e104082f7a1d23244d1488f34cb135fd46494899100758f4892517a793ffe45240d55685ecad2b562bb1dd6028b9de5db3c24298cbaed23b19259702d884ad8fcfa02cd074d76e159d5efe42ee49dfcf47191800229a28d86148e01144403c1d262a"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "479021b66912d4e412485fc43ebb103c83a42dae2b6240968ae8c583eaea39acf56071ffd4fe66c528bbadec599fa6f96d0b7cb7cc1467d36bb849e38b04aa172768d9ba61a7fbc9a701ecac24667ce9f5f9e06331c8d77c48637a099ccc1c79d3683e2a68e2e9d450b326982d0735978c710078320e67c7f8acacd72b834c6236bc61c7bfec0c95496fc15ba5bc5ce90169"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "272dc398dd8ada37b472add40a651975502ba01bca1687b01a8cc018682ce1e014182a545e6aa3f1aad245fea1cf1364db12ccfb494f8eff56663c8b020c713bd4ab0be917e3e3152a96aa44438d7a2c5ba310a7e3c642"}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x8c0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:16 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x1f, 0x1, 0x0, @mcast2, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x700, 0x5, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r1, 0x4, 0x63, 0x0, 0x1, 0xa, @private0, @ipv4={[], [], @private=0xa010102}, 0x40, 0x80, 0x3f, 0x3ff}}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_iso={0x0, {0x9, 0x1}, 0x3, 0x1, &(0x7f00000000c0)="7cb47ce31382f283ff17847465c2df7546904b4eb734265f8b9c528c54970328e588fec4295e735ceaede599a85f3c76af4a2d35803c1d39d44df95d06341472a3f4da74140a3abcac596c2325de40c7a589326dd8b78a653f84e3bc2139312b9571669395e853e74e68008cec5d0ab4abb04d8b14e382fcfa1081424601066164f3208a7c79c3e6e8", 0x89, 0x5, 0x2, 0x67, 0x5, 0x40, &(0x7f0000000180)="009d4b13333b4afa1b673aebad6e67e9d3ee1df3c9d80fcb6be64a3a1cd56a9fc4bb410ec13502ca9266ca8cc31520d1ae7b65ee683de557f7cf6488", [{0x1, 0x4, 0x3ff}, {0x6777, 0x9, 0xffffffff}, {0x0, 0xfff, 0xd42d}, {0x7f, 0xfeb, 0x7}, {0x8, 0x8000000, 0x1}, {0x2, 0x5, 0x18}, {0x8001, 0x7, 0x7fff}, {0x0, 0x5, 0x8}, {0x4, 0x9}, {0x2, 0x0, 0x8}, {0x6, 0x7632, 0x3}, {0x71e3, 0x8, 0x5}, {0x7, 0x2, 0xc}, {0x6, 0x4, 0x401}, {0x2, 0xfffffffb, 0x2}, {0x5, 0x80000000, 0x1ff}, {0x97, 0x7fffffff, 0x5}, {0x3, 0x436, 0x4}, {0x4, 0x3, 0x3f}, {0x7fff, 0x9, 0xc7}, {0x9, 0x9, 0x7}, {0x3, 0x81, 0x1}, {0xf11, 0x6131b02b, 0x2}, {0x6, 0x401, 0x7}, {0x7fff, 0x6, 0x3}, {0xb99, 0x8, 0x5}, {0x7ff, 0x10000, 0x9}, {0x0, 0x3ff, 0xe8}, {0x7ff, 0x800, 0x1}, {0x4, 0x8, 0x2}, {0x0, 0x473, 0x3}, {0x6, 0xfffff800, 0x6}, {0x8, 0xffffffff, 0xfffffffe}, {0x0, 0x9}, {0x3, 0x1, 0x7fffffff}, {0x2, 0x0, 0x4}, {0x3f, 0xfca4, 0x1}, {0x6, 0x1ff, 0x10000000}, {0x3ff, 0x1, 0x9}, {0x7, 0x6, 0x831c}, {0xffffff59, 0xb2, 0xfffff800}, {0x8000, 0x5, 0xed26}, {0x1, 0x10001, 0x1}, {0x5, 0x6, 0x2}, {0x8, 0x80000000, 0x10001}, {0x2, 0x7ff, 0x25a9}, {0x3, 0x101, 0xee}, {0x10000, 0xd4b, 0x9}, {0x1, 0x4, 0x7}, {0x4c31, 0xfffffff8, 0x5a}, {0x9, 0x1, 0x4}, {0x0, 0xb67, 0x10001}, {0x6, 0x4, 0x3}, {0xfffeffff, 0x9, 0xfff}, {0x8, 0x1000, 0x3}, {0x926, 0x1}, {0x0, 0x400, 0x10001}, {0x5, 0x1000000, 0xffbc}, {0x504c, 0x200, 0xfffffffb}, {0x8, 0x8, 0x2}, {0x4, 0x7, 0xc8}, {0x4, 0x0, 0x8}, {0x200, 0x4, 0x9}, {0x3d, 0x10000, 0x80000001}, {0x100, 0x8, 0xfff}, {0x4, 0x2c81b794, 0x81}, {0x3, 0x3a230a42, 0x6}, {0x2, 0x3, 0x3}, {0x9, 0xfff, 0x7f}, {0x3, 0x80, 0x1}, {0x1000, 0x76, 0x101}, {0x1000, 0x3, 0x6}, {0x4, 0x88, 0x660}, {0x9, 0x5, 0x1000}, {0x3, 0x6, 0x5}, {0x4, 0x7cc, 0x7fffffff}, {0x9, 0x4, 0x4}, {0x2, 0xfffffff8, 0x32f}, {0x1, 0x6, 0x2}, {0x6, 0x7fffffff, 0x1000}, {0x3ff, 0x59ad, 0x80}, {0x2, 0x6, 0x4}, {}, {0xffff, 0x200}, {0x3ff, 0x8, 0x5}, {0x1, 0x8, 0x9}, {0x0, 0x5, 0xffffffff}, {0x8406, 0x2, 0x10001}, {0x0, 0x3, 0x943e}, {0x7ff, 0x101, 0x1}, {0x6, 0x7ff, 0x7f}, {0x101, 0x4}, {0xffff0001, 0xe0, 0x3}, {0x81, 0x6, 0x3ff}, {0x0, 0x1, 0x2a}, {0x8, 0x3, 0x4}, {0x3, 0x105, 0x5}, {0x401, 0x4, 0x4}, {0x5, 0xffff9c45}, {0x7fffffff, 0xc60, 0x9}, {0xfffffffc, 0x0, 0x4}, {0x10001, 0x3, 0x2}, {0xfff, 0x3ff, 0x7}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x3, 0x9, 0x80}) 03:00:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x802}, 0x40408c1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:16 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f0000000100)={0x14d8, 0x13, 0x2, 0x70bd29, 0x25dfdbff, {0x11, 0x0, 0x40, 0x3, {0x4e21, 0x4e21, [0xfffffff7, 0x3f, 0x3b9, 0x6], [0x8001, 0x8, 0x2, 0xd28], 0x0, [0x20]}, 0x2, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "984e82cf282ac11c913684d7ea31fd366e29874c2a851c5b4496a3b22e8a206d7960b31e72cf726afb042e38bcb06c76cdfcce17cc1b3bd6b761d84583f33388edeb4c6f778f3aff787914e64a83d4e21ab29a95606df258b58f6e5c61e7981c59ccfbf68abc009044560cb5d3685de7d139b234a16b98b2a5955b4034724b547c501d5d2fe3191d26e9d9e51dd42496a543758e4e911cfa96b993518e6af549661d7b2fd4e8ad59f09856e5bbe1c8e3c93b735a3ee6f965f54c8a18fe8f6399c561d384fa6aeb685f220f17fe374715d86405e99974e5e81f88290af321d73bc6340ce386020c8418bc94f4b209e038a25145e82fd16b37684ebe1902c177b73353e8b7c6193fe382fcee3d8c1fa8222f432fd86745c6cdcf395e5abf7269ddb1106bc38e16be468fd774e22cad97593b143a19564c4e2305eb084129c93e1a37864c1c1f6f4b356fa19127acf9fec250749db6288404181559b99c9990af010d1b7622c9c5669619d6ae00890452e79fa1b0707ef6bb77f439fdd050b7093b24b64c1806be79094b18f88475785644d616ea21c74957dbaea2eaf15ccd8079499b5d9ba41601b1ff111331039bada6770d5a9d381ef0d440d372f2a8a2b5c5ab83396ac09c64ea831261d238932c7052bba3e767adc7693b3a234466e59ac379fb414c8c19a46030da8089666a7da2d469723b244be9c68eb6057e2897ec457b37edd05c8e1ea8e567f9f4f7b4c560772f4d65d3d38e42f7f61b980d4bccc2ab872b6ebfc62891cf30fd3206a57952e16eb6a60b141edfc3991ab0193c52016ae180c6008d878bdb1260e9dc4561ed292ba826a745a6f989125ef548c84a9710d344c6e0eaa1964f9a31a4cd96c71e2a9568a1a7e620ab2cbd89dd8ba971cb4753c0233ff160b77b2371b981bc2ed637f3ce19334294316a245d7b78a800442f238661b00148cf55c288357530b09a2be331be08966eb6406e6d75199bb806737204e45939ae352b4d89455a068986fe5eb7dad6584e0980df52954483e8a9c16f18d3ca80cbee52152041198b7b4007ef898fdea8133b1ac42c0ef45cb3e3c050994624d1a5da5ee49cc060f17ab581ee912cb755f313f56f80f7835b4d8bc14ab447d0be3ced64060d19d05560a526b170c4e2a4ae481af83bf154dee04087ed513ca91898369b578dccb9f974f452afcab0976cc4f0da992b63aa54fc954112e26f40e72828f6784feb14f0eb79da40abab0ca7b870cfadf4f1173674792e9659f6b7662db083a19fb58b2303acdf826c16708e1465a283649a82bfd6665d830fed897f7703d2fb4b0975776b51b9ccd9aee6b51a5e290e5e22c52431beb6a105fb836f2d888def6ff67a6b8358a724e382db15b1a36e281ed9fd6341ae3d4b76be994f619a227963c70e9bc8bebfab90e01c225c79903d067c0e9904c4dc658a2da6e05a134c2df62faaa1032bf01bedd26415a6e5aed0d6446315b62639ba5951c91b4076255642b88bb0cc9f4664321bf598277728874b74fe6b19daa068fefdde8704df229a82a25bd181b5aaf929768893de27eda0d6b664a63ff02c4080263eb514aa58d38e231770b474c48e77b542ce29201f11115d37e1b2970105ae6a71343987a1cddffb96908955e7e43c650bd645f0499d51b9f2dd246d8e60486ca3f719ef78036d41dfe4ad009206aab7332f79001531f194d2bf0e7c25fd93b999874b69f95ab32cb88c435c531e42ade1a41b594616cdfaa0eb36cbab674723733bcc2dc6e0e29f962c3a79a10b64aa002e80ccbe7ff5dc700edff7e2450d41e265f2b13c19727cacbf342fa70d2393c415969b81b9a30fcb63a8769ef5ff470c134bd1333716314aed9bb584f19530aa1725c15578ec873c73598e0f5e38fc9cc1867a8d48c865ff7aac20c92af8dda6f1c21ea34ea976ff0eb4420543404e472d6d3d0b896136a8df5bc0debd6c377c32c9091ad8cb117f65fc76be79d648747ebc8e272c2be1b39886d94872ca910f207c5380ddbe33d977d010433920e57da40de048d76a0bb267d2771d5811e0d968e8f489a3661895dc7aef127576eb9f5b586f78651c0584bd39e8bdd0a89f6151f71b16ee4bca622d0571f3ac15fa130e549efbe5cc591ea398164d177eb7b187a16eb12b7a655f6d9298fdb1f9ed29773253c80a896a53dc6098c4bbf4f3f6fcc41bc09b3b38a0de7eebd1ad08a603f19d248bf1b01e7a4fbc509a8177da5cbdb6bafa511013948c9bd900fab02f7f0cb2483ab93ffa2205321939a03f541ff83a17b894c4d7fe033f888554589ebd00050f4c997e53180239a55df315a464ed131c0ee2cec44b5e05957b380f3553bda9ef605c9156c24b0542dbf094cce09cf6e41672a1294dcc722741476fa81914ff9fee037f19055b2d7a0a6dafa9795bcbfa811e8eceb1f257ffb79d7f5096ed1341c817c77e894a503e7d8a2ab8b9c97c778189c253e737543bee6b3b19d39ad998e8f6e9e25aec83ed562f1220d059ff9e3c4c9fbe3742112777968422afcb771a721e6c5a490d6d259fa8692c1da2784884b99e5c2a6258859557758d7a4165bd7673c7f4c5e33bd20a145aea4b1e4be33a59ec500ab11a68b8e2a4eb1629ea7d9adcf1a73fcf063de465a4b15d00d871c82f96b00901fc155e46e121ba11aa77302b1071973333e696a9e71cb3549c87c8f0a94ab7c079d79a5d3b22b8afbf4653241419b1e61489861068b94d787efe674de3ceca1cd914a113ed308d6616842cdfd7a0a4f9ed3c513924159adb33a3ee987a7f28b99d33be4abbf7d6e698d783e25436ae0db236bd24d4fb8260f72d19932946e485c00fb754d29f377557a3a4ac6b75eb6e119dadb9fd4b3a50ee5a75a62ac25a2bfcc72777158fc5dd3a4875a658522509ba2e7f88775d8a98bf01bed9370236c3fc809a159308887512f1ada1bf231a644b15553df6d6df725d7cacc23e2a21cb552e7f1f0e6ef99fbc46c906b20af4a2c8688036995673b8989ba915415014d26703efde53ce299053a07b519aea8c699ac0d0533ad81d7f2d6b136b63b14f161e04949e4fea0e51782778790e249973111358123898df6f69b9986438a9a64dbf14843740e8c6ffc1b9b8a74806d3fd3513b5e0680d29c87dcf18f0b6d6a4e3827390aad7e1169fea803d6cec9281615ffa27d4ef20e5e903a6ba52a7a095b3a22d6ecc5a28b92b4f588aabeaeb92eac89b004c20b23b2e596d1545d6b8425e9552e41d61165f3aefdd5df5c02f1e88a60734d6208eeb90d8bc67047509447c0971ccfed80d4b9dd987198557c04c87027a0ac5cd4dd205ec937a70f4a65a6f9f3a819157c971b90b457295a49816a5b8ab5e9140dfc8f83ef89368c5e94c06ca3fff04584821ead20aba15708a5d81f806ab590b7071a1d8d75a1aaec44ce5ee2f1846e1b41a833da4dfdb6029958be82818ef899b085934b38064ca18d5b4dbc9f6fdfe4fc1caed0495890b7878ac8ba47929e89ee89e7189e94f585207d012945a9701221fd43faefa28614e09d8ca181c77c68b35b226b371e6b7a353fa39f95862f6a7cfa53057cbce6b5986a93d293ed786a8a1382ab7a56e7ab5076cfe69aeee7dad1952b2864cede67ab2309ae78c0932fcf293dddd75d774e8e8bbbb6451f0cef67584675c9ebc3a2316f6b2c696a1fa5b6d43cbf31b42cc3c460d97bacedc6405c229a8913fe6e5e0146b0c4df37edc921a5f1380ec9c58ffc4136ce022732105bd0241b49febbbeaf3073449c87662e3e0e1ec91e3f118a74e5a01921c3f6294e583928578193dc82898fb446d0e1dc02777ffe9661d0581f4eaba6748275d823ac59ffeba336ebfbb9e1c5bff8f53710759669619d7da204be0af7a83cdf7112e3c3fecda8339e4bba191e3e7946f1fa14c3f531a5ed9b16428dc5eb76c62d4dcaeda9e2d800a5016640e920c90fbd517385ec8bb037711a646bec1607ebf4ca862f1e35eee744eb23d7fb44916fba7759721cb7703c38a5d34a32a9164eb499bdc131a4a616af64a47b6e2384010b3e0782b22ae465ccfd7b8242192f1c9b386bd9b559e052e5e260ea89706ee8e9f341c97bdd6159f283faabef16a55953ccc093d7176adcb76876a1aa1b642020c9595bea8b815f4ff66fc790148a184ae81ba6905163bb2642e51d40b57ea8c3499d2160df56dc09837c7d27dd6c5d88e7932bd717e0bb61c26ad9618f98807267b79be32677f1cbbc585de1b6058d8755cda6420ac8a6238a143e75bd38e3d68b206139907894786caaad1a929c8498aa3def11e2e7a876e3d4d50f54d40076a2d11615b03f799e004f22d048f0adfbca0043df452c77befbd31eb38ea481da8eb19ebda32b6407b1ec5d1da4b4b391a7bb5451cf3d852cd63274cc0a258ef21fcc29084010104bef183410e452fe8e05810cff6f01a9fe37914e263f819996aebb17440c318ba36ca25775785849ca7f1e7a2e4abbc8f5158d9914afb9d5187d0a9e7b248eb95b43143cf6c9185397790fdf25d65f2390bf619c20fa342fcf1f14cad8448e377f871c50ba2e8bbef4e5e416356f4db4ed5044415c5fcb357f2ee8db3aa0dd60b7a30938db98c1a8dc429bc2d5e1e22690fc2facfa692c33bb957486b4812c431b092a3d5039a352322ec458c8cb345516f1ec6ef3fb846897102a2c7573b33fc7c59f7b5991dabc24230cd0f1c8e71b6547f214e2d94e37ce716069b57cb2de8c7d06dac6e05e25a4be42a06c65e6c9bfb1dafa9b86fba6bdb67bb08607bcd8ab7f53f86032c042ccccfd660bd040b521b23ff154e9f40050019b7d98bfa682c462937d642e2b86542ccdd94d22e38666d734ad9c16e802b113e13b21ae76f47ed86fc0423aee6e7ed64e3c43113b3e1e0fbe82508ada2391af0bb20a0a3c1c211c41a3a55016cf682af8ca24b8a76429d061a5d1291765b246bf5ff396b93048d7fc335801b91ef23fc2bfe2957d94d92e54a3444fb8e26235ae765e5731221d00b3bfb17471671bc73c04d8283c429600267af2ded266abcf4025282fa73dd8937f143c50491d503a3bf144663f2502329ef0fae2124d23dbbee00779baa2d7bda5d3dae856c58d8c27b2647e12e65890ab7c980fd424b0c52f8c30d4fa5f366a6ef59d381b9440eb958da36da023cc7044635d444346f5add313264b59dec570e5004a5587ffda50456ac2c537658ea78156fc08bff60505bb7b8c6896eb485334424240da79aa6c7842fa5f3393daa15d3bca67b9e07e3aff468c5331871d2633df76b379583922ac0b210bb43a53b25a67d326e9bd7e23423cd666445ad0cc37e71e2972d1e4d0b0ed9abf6fbe55c67110d301d6c18bfcde3dd4715ed8d7fd5b5b7c6c93506b7214c45cad8ad1d18e9ce4b9e5a4408630920459566fabd9b250e0997e9dd75c8fe5758465e4848e2cd4db640785c83c3915669211d6e6c80b6b6a89bc8afe9fbfae84c1e9905baf075aa04d072c026af212ec3380c12dff82de0ba63b620643752df857652a115112c952e11190b2a46b181b0166ad77e95bfb9df527f07779f28ed4dc0d66bf26b785c7d9988d46614aba0ad78593b3d2857258374a3e54b457b627d1633256ad135ddfd94df79820262cfe4aa737df032ea9bd7e9aaa86ad6b910b26dd1853494d2798b96ab3c969c49044cac79e789ce72fce85fead3dda4c0c8f6fc9ecbb320579c40df63c23f5d61bd28c11a3ee96b596c35bc1704597da39115f1faf6cd8967fbbd6469024ff67341ede98c9abee13323234d"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "6ccf0ca898c3b683219b0e4401e0befe91c4da62d6c8a503cdd2d2687f80ef8f80c1fb6a0152cbebfba42aefd344e260cec030bbd5c62c71c24ce6e37d99706fb146fd3672e15fdc0da78a20dd593aa5617fea302a4d03705b33a2ef0fcd06c5c71308bbfaa885ce6701765244328e2864e96b03e7cdc9b60b0306e1ad298fd2e78ea6bfc547df20a580b6eef29d3d3f6fcdbb268b11c18eb07f4d24883c5a3c06bfadaf45f5791f701b1e1a"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "0bbddc43e5d71fe415a9e29af3f6309f23d1d102e4e1bc745f4a24385b788f7f6b5250e6657cc04d87fe6906e291631bfb57e9fe3f1512b15b1ee809710c57480a6cc931c65e66f4faec947ab72552a82c31d6e488b15691e8e233fbdabd13d015b9b55b422866"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "97a988c0bfbf3edab334eb3eeb284c63cdd695ae88e9d60782b1c4da30a6f491282aa66e4ed4be9578101c90ee4687bab5051741bad298ef6973f684ffe9dbb193ecbfc83313f79abab1d48f26b2a02370e7e582753bb15f2e6a30b05f4d3f1bdb47fdee26f45c77cd867dc42c91ce57520bf4a085b7f2279a845ca01b25447cc3b6c26ed138b8a7f0a0c98a776b39be0a5271962c4404ae5972f02295b92c3456ac4ad2fe2955a06370a7b97cbd8d3aa06e89db60fa292767566059aa90a09bd98ec2a5d52485c36310a0c60a00cbd6c73cd799ec8ad39a16ffbd59c5f5a119247928cd3f019cab52f512319088de"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "0048e070114065c586f4c3d0b9b29cc8da0cf88208c97a078af3cb1759c4c6a92b18aa0f704bf09868ccde79bfd18c7c1251d2c4e61ac72a271a367e11b7412c3007e2b8c51b6d57a63634268511bfda7e881b1004823b86e0a7da4357c6229ffbb8fb688c833c0fa7a22fa331e24f83c7079c5ad3941f83a4309fe99c77b9c3ec20ce39196d6141c6013d0899082b136717cf35420e7d7d755feade43a0f3981f3b29022443b99a4471fe861e5a2c91d5cad3165ae8"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "3f174dbacbf20cab66768966a54c5f222f1548a1a8d94acce70d4e4b48cddf0aa64ae831e7e61473e35dc44e475b08dd86e986dee104f30a311dd85d0dfd8d8d8b85e6aa83e774ca370bbb132b7bd5afa3f59d61b8e42a9de4708b8afee26c52502404edaf4089b9d08fc8e30e6d842e33541cafa86a2ebdc0cb69d8a1d9d835c1ca3e56add9b039b9e1075ca4de3f88273ee81711b8b838"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "f347f79acb7436c0b181c8cdafcd93cf3e83cb1786e1ded66c2f53ca6e655c0b6f0639e06b395acf894e1fadc5c6783558ca900ac68d828198de56a95ca8c980b7421fdac2fdab5781432bc70d665927f2d69e0bd30690baf5dad7b46a6c3a68e2e56ba0cf684234f83e470b488fa7e3239b962d3e421643bf92282aa31a35fd9e"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "d074ce2988297490c59195cd151c20ea8ed6b43d6dd42f8805665a4e1d16cbe3905d65fb54b39289425339d75e8310ff234be472f08878a1651c43397e56978bdf4c80fd3e1a1b2a99bcfb15f6fa297272a49959979ac8afe534c006cc40a68343802e7b1a905e7abbfe525e8f093ff2582ba64ceb718f3b23e21254b8f5e95ff129c979af7285961651acf99363a6802e43b94b"}]}, 0x14d8}, 0x1, 0x0, 0x0, 0x20040880}, 0x40000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='--\x00') 03:00:16 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000040)={0x8, 0x100}) 03:00:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2b6, 0x80100) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x53}) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x412001) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x7, 0x4, 0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x100, 0x2, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {}, 0x98, 0x2, &(0x7f00000001c0)="1b0a563b664e5170437ccc2037dba96ae847af4d9d", 0x15, 0x100, 0x10001, 0x0, 0x8, 0x2f, &(0x7f0000000200)="6223a289a52bbb764ccd791f1c7d7045f433f47e66f92dae79982d062218105ecadadd73adfbc3d4835c3136e9d3b5261235408e5998"}) 03:00:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:17 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x5, 0x4, 0x20, @mcast2, @ipv4={[], [], @private=0xa010101}, 0x7800, 0x700, 0xc2, 0x7}}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffdfffffffd, 0x6200) 03:00:17 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r5, 0x125e) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x4, 0x208082) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000c055) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') 03:00:17 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:17 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400003, 0x30d483) 03:00:17 executing program 5: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x216200) 03:00:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') 03:00:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xf9, 0x6, 0x1, @mcast2, @local, 0x700, 0x10, 0x2, 0x7}}) 03:00:18 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 5: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x216200) 03:00:18 executing program 2: ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0xfe) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x66, 0x8012, 0x6}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, &(0x7f0000000240)=""/130, 0x82}, 0xb002) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008800) 03:00:18 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@generic, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/246, 0xf6}], 0x3, &(0x7f0000000440)=""/185, 0xb9}, 0x40000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x4, 0x6, 0x20, @remote, @dev={0xfe, 0x80, [], 0x1c}, 0x700, 0x80, 0x8, 0x6cc6e43c}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d00)={'ip_vti0\x00', &(0x7f0000000c80)={'syztnl1\x00', r1, 0x700, 0x8000, 0xcd, 0x7fffffff, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x66, 0x0, 0x6c, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0xe8, [@dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x43}, @local, @empty, @multicast1]}, @rr={0x7, 0xb, 0x64, [@rand_addr=0x64010102, @multicast1]}]}}}}}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000540)=0x9) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:18 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8000000000000002, 0x402800) 03:00:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000002c0)) 03:00:18 executing program 5: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x216200) 03:00:18 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x4d5c87) 03:00:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x441) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x6bf512e3, 0x1187, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2}) 03:00:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x2200) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000)) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:18 executing program 3: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:18 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x216200) 03:00:18 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:18 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x5, 0x400}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf253500f4bf8d6f99de48000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00340002020202020200001400fe0050d996a1fa06c73afd777644dd30f338"], 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x40) 03:00:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x1, 0xd1b8, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r2}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) 03:00:18 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x216200) 03:00:18 executing program 3: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:18 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x80, 'syz0\x00', @null, 0x3, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x80000) 03:00:18 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x216200) 03:00:18 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 03:00:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x81, 0x665, 0x3, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x700, 0x80, 0xfff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0xb8, 0x3, 0x4, 0x20, @mcast1, @private0, 0x7, 0x8, 0x2, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1f, 0x9, 0xf9, @private2, @rand_addr=' \x01\x00', 0x80, 0x8, 0x1, 0xfffffffb}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0xc001) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:18 executing program 3: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f00000002c0)) 03:00:18 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000140)=""/126, 0x7e, 0x0, 0x7, 0xffff, 0x9, 0x1}}, 0x120) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:18 executing program 2: mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x50, 0xffffffffffffffff, 0xe6) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x889c0, 0x0) socket(0x22, 0x800, 0x800) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x6) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x200000, 0x0) recvmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000880)=[{&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/167, 0xa7}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/24, 0x18}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000600)=""/48, 0x30}, {&(0x7f0000000640)=""/66, 0x42}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f00000007c0)=""/186, 0xba}], 0xa, &(0x7f0000000940)=""/33, 0x21}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0xd}) 03:00:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:18 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x44100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x200, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x40) 03:00:18 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x40, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/53) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 03:00:18 executing program 2: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x40) 03:00:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:18 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x521000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff80000001}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c000}, 0x840d1) 03:00:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x1}) 03:00:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x8, 0x0, 0x17}) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 03:00:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000004, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80000001, 0x9, 0x18b}) 03:00:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x202c00) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:19 executing program 4: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000000c0)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x3, 0x1, 0x9, 0x800, r0, 0x7, [], 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x40) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/57) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001200)='/dev/snd/pcmC#D#c\x00', 0x4, 0x20000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000003, 0x15c010, r2, 0x83000000) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000040000000658f60f87781118e38b7e45db78e84dc575d1a8ad03cccdea0826bf6da7609940f5b55553b36ef3341c665a66776e8a5d3519d07f5fb3b19391eebad2610af4aa5436cee229c6db2bac05052ecda53ab35ab60c804ed8404dd11318bd93cce9400b9a682d3ad22330ea3eec55ea6fcca80071cd77394ca85b5c957f2ca26c507d3dc86684e0524079339bc9a1c89bce769d8b6a0eda86ad03125cfb75c3c7ae2754426cc6094c5128e5f66ed8053ec17d044a514f87afb68609d90ecd8cb13d3ae2c0fe91b39afffbdf9abae6c112c6e3ec5b99839c2d48143135820714b2054939eea4fae21a924c53b8dd32367688eb42e09ca3ef5c004646180a82e1aab1c18ceedef5925bedcadd1648a8a33bc6fb35c380bc64d7c1a7db13356240c69cd5261efe5e87d92b97af2cf2717f5d472054d7d1667ac14883d5796e4249d406c87c01e8aff73106c44aa244650790996fc5dcba7c29c7b51e136a3530f3dec6f023ce6532f859edd67d0db1928a9f1ed12403aefd90f29273bbee169c1ba6af0e616c877c87d61f7c001af900f06d6b37e273f68c0013201ea8835937b464ceeba550957ab9c4834e2b54c23f8ffee3982581f558c3a2af8257b8611619f0540834a12bf1c6c6b5581ef9e0f876ac5562bdc5daa54fa7097e5a6682c4bd4447fb09467fb391b4b830d7b031fcbddeb1a08349193d225a38c1c68eb310d24478eef4edfd13e698007e352a66e32b98e9bc64a13e4c4b0dfbfb549b39eebf398ebc13653fc73cb89340690711923586e9b7e7782f38cd95620d218a66b3008dba3fe731e7ec0d1814853e1df6fdb08218623799cb35fbdff40f50db9ed8be841a185e85606457d8080659e478d3d2d5234382833a38a2eb9f0f0bd5bdfe9af30dfbe4cbf16e591e029589eed6ed4e8e075e4f13d170cc1fe87505e446d3752a6052d89005978d94c6d0fc9a7fe8912989deae797ccdf05a4cacf1537f72d25be823a4c0ea229296c5e06d96a5b70189bdfd09a56ea22a136e10b4b3780d9ae3fcd2a0862b5e86a1e782b1f62f248c5913be9895b18d8e1761bc4234aba7bf848cd8f5c5b6e0476fac60a7bcfd8c151105f6f33e3f4d9a964e86880e393470ddd6239e25a0d000e60cf7daee561fb0d1ff71a96efec2636901a7719e8a18a7e78b32f1d61c291be827ae60da6798ea7715a581c7ce8adb69185bcb562878df5a34daee2678c0c756cdbeed6624467cfa4b0100000000000000b0e26c19db149972f96aa18299c07c1737be38c72e7df73a2d50bc9d58e91a66856b035c19372295d0db50fc8067fd25adc0a729acda05c48218b56ecc87b1622c03f4f46dbe0f373b7139199b9f145efbaa824611e68e4afebfbf669931f4024d5cf46dc53402a3b6fdfa12d9da0d86659db5c7992c4367560955eaf9492bf17dfc6bbab373b8add62ee537339aed38a123f8733aa6a31db25aea1e7a82f6f2041809d3167c6a1939971f2f061350ef6c806907afe1c53f94e878caef770a65665d5cb31464f7cc09b8292190771c9ad857a39b47f759880e7c0a143f8453aaee3d13eb39dc63660a937fdab522dce84d86323a5411c816997b2d73c4cec252215a2755e3800ab75e7c8ce942d45c6e03b7f3ff4f61fd505a7199d94f2f228939c124ecc8bc3737215f38a9ab71fd9fa5a361010c9b4f85cd69a685f7605b0d76895f80e831f51d2308781ac5a590b8bc107bc8c643e253b9beac72bc873f2369d06881e104f38a2fcab12dbfb733898c3b33e2bb533b60f2cacf6bdef8c2838b49e3883cc43f9540e60fec788e10fbee177c534bddfc965b50aab3278de79a2af5a26a46968ec6c172440db11048d75f9abec1d49f396822de05c25a198161a41ff876a292de97df1a14d751915f8c165c8c813f6d77b6649e69b7b0a7d9d8dd0c034a5bcb83317dd432eb5bae30b351ab3a9f014ae2595948d3cc754b7062715cbf67aa31e8ecb4be1bfd74aadab92c10b04705b5807b60cd7b4f4cacd504e0a2410ca736ed2f42308ec3f53756d0e91429bdd63fd1ddb9e82dc285148a596bfcccdae066cf2974f3e2674c4e2d1afbddada6fce27c0b6b450e94e3f33f409a292956dc5fb5dbbd5a404632389e76e2a29896fed83f21dbeb680a17da1eb9f58f984c19dee90b3b42c64fd2dc1e7043327390624288c1adf554db742af03cffe30be9125b143708956946523cebe245ac3cb451d5e18c8680d9de3ea5139633540883f5d643ef661df1df9c679fe6fe59e792a3e5fa34a134050d217c82dc89811640f4f71a4de44ad69c519ddf7afbd6803df0fee9368c68f3ac6d52a135cc5b7e511c6b641cf17878d9e0c53adde3da646f4870707cd52d890b747e0f401689c4c4abfd8289338aef0bc66947ae5c833d880300bffcab4d44cd4848e2450efdff63993aa5db7039c3e2e561fdd7df9d3720eba87d68a5a167a6350fa04f74233291260699db87f72e4069406243f88d2979b8dab00f4c5734907554c2d738068e6052361061811394137b147ac35d5690a5e76964b675e2c7beb02eea94f9a2b25bc1585fabc9260f1a8105e2ad4c7bacd22df4aecdf5b50725cd926055b3ad2d1db9455f105738ae9995722f9fd26636c4d7313735ba3588cfd75eeb2a30e2e22356e27a3a1ab0217e9c317871f406d5621df08e769d8ffdfe2a393809709e41c6d47ec5aaa9d075a4bdb62a00d08a1d53f155d387faf63ad2f26126defddc51060226085097e904da9cd40b269da30a033223b3e6289c419fb39f4225ba5fcd985487313cd1de38a07c79fc33f0489d00ae7c94fe244306382e56c46e349e04e151d4953127c09edb510fc9cd60256a3746a681faa802467bfd3f4442e63999d0b0a50af240da1b29c8cc25aceb62c3659f2413ca4aafd61928066de5c02931700cb792d8aa584a140ddd49e672a749af3e3d63cbf0d7baf30ec0457cd676d18832e2cf6c2836fb3a5e6c0942f84b442cf6f8673afcbf43c574b32b242f6ab250a3c03d737780855bacf6cf2e5da3724465dea3282f6f8c96a88c6e7754ffefe7bd3128970b07d5503b161b7db6ac52929bb60b4b2a82aeb349d04c5d54d80e132a344539a4ebd5d63a91482438e46ef4ebfc5ba9859cf725561eb094a8b3e4fffb4c719731fe39923d931a3efb3a9dbe973dbdbea4c48aa6f31daec88f6e9ab96c129885769c1ce6fd6833a749980d4d51c2516a5fb0cb13596150e05624ea1635c830b484970e0de444eda1c623c29cd06fa2b63f85a86372aa1133aaebc55d9f440084030d92bb7b25de4d83f7491d198920377911fe7f24ae2dbe0aa4386fb5d819ebc21e28243371043d0900ef8a63e2f21cc35dc6708e2043424986ab97630659e84d90d3bedaee77887bbf109ab90777b3553f3e3589b78bc9d110ff339dc5896d4e3f8a0d9b8a3abbf201d21cdb6bff1e4c132ca3e29b6cce2ae4c90bd8fbc66284d91c442678701ec48b9ce5446169ff6f2cbbad3526bc79061a07c4d66636765aa71a9357ce90a49a7d1501f08ac30e262efd64cb759d8adc3c01723c5ce8668f1a68475c1d1e7e53adc28b0e4099937cb16f0f47244731839a9e0f735913e853638a67e76487ed8361281c39e8af5850c536c1ad2669a70093bc172302ac7394782625dc6ede017c47eb74d9344325c70945c0123f9412eb88d99af1afbb47f818ec508fed7b8de375dc7f1636d3c1ee0999256377b4ea77a3d09f306dd532f7df878f3cb3cc2fa40dec4bbb77d0a39823aafbc548d438b1ac301c514cdf210b9f544c13d37efd701abf3d7101907945093299cee0061132c48904ffabd82754474d8a0febde64196e11bf043f35c222c79f90f8519c9f8977db3fa682d5e17ff48768a30454191c795f6da27a8f66e6e73dc220c546e4a48a65d3331821ce15fc7e387ae7f254362ecf9d2847a813e93ecdb118a97b725662c0ecc054793e7e5287aaa090487f15f18f8a0ccf0398844b89e18698f92fa168602369aa80e0578a587454c76465e19e515455e1c050381f1e19428b366e701601588672b9bac1e4ef432946e6ddabf9d52a5d43191af7c42c46b1dfcdd2b2ce8b114846eb5759fc167e6a50197a0e3940a10fd22415b79f42f9394ee7761a6a6a8b8fbcfbd4b12adf2621a395572ffbc94aa5718459330a1f78fa409188a2a98a74168bec53986d2e650ad31e1011214eede6f1c79b851bb8dcab532d27ebc50574c65d288253f586797e6fda175f991195461e352a21be2911002fcd26291cacfc332ce7dea570f5d84c5a8138e676a7403f32366ee242a061d3e6b61d38003aa798efaa2cec0682f42a89c83ffdf348044d2953e86a3affbdd05d094f991db666f142455d409fdee1b0163c94adb76950ae2cb9a60e54ee24e9f15241a1e3108eb03d48506aa0677b3761098a1b32a210982005366b30f3376770776a784a094984702b6d7e822c14ab39cd5134daebc5f9f79f3c1d90bdc4a4d3f8190ecb5064a4bb46b88ddec51f67175063be06de44c0d3e1c3def6eaf165b5b581e00896bbf960b97c71205aae6675ce75fd7e28a0abe94cdb5c319391ddbebd96b4e2c17f5bbc24bf7a0caaf5907783d234d710c1eb9701c0a6fef14bc153a78cc490b563e1264040ca750a3de57e2c3e41e85a1efdc4a62ce8d809c3b9536bb3fd707ba7ec175a8ab530cdb04db14bd08c4ac03ee6cdb1cdf48b967a46c62851b6d933ee86230bd2ddf2a3a3c1257626c8f88b59e080a82b447d61ffa6f6fbe11e128a9d69cffbcfa38d8d680cdc458870708039d65950318e38528024b2d360ecdb1f6264125e8488f3db94c8b0f08c5c08d515188709b0b80864b2aca4686eb994fe547079d8f6c67604128c0939dab85f1fa545650c7ed8abf707aa9e85c07abf5e65b6798da3a8cd3a14384c93617bb533f38f5c64ba94e86542b079affe127ab1419e660c8e34488043898f71e79641a6d773affde2f638cbcff483d1517fd1dc5fbd05e44377ee9d3c9f63a07ee76cb2ea852412ee57abd7888dda5bd4657f734aeaee047e7607cee7cc5d70a9e9173e9a163d1496d8637dd54c5d629bb3b3e0a66e0c78037bd9369591be869c0e5005c37a0515ea20de88ebc86e7a0dbc4d2c910604a3d38f4ba04275f5be85c85e4e9c3956ae59282fe158c653c9d09f3dde1244ee604fc2f97e89aa17182881863d37102d7c09ecf2d15435e06d8cb7fbc9be88b0abf2d20089aa126ec6575de5494f97e914c9e938162623e5ac812a20e74bb49bed04de4adabdc9eed0e38db5771e3f272f69b429a0f31dd0f786bbb0f8d49b05a284afb60cab84feb7642a80f9346db211455c867c5b2e4e896886d25f36953854d1da1046962058288c97375eba24dd6dfb93dbada41be4237360aa4aa9d5778ac8a4d88be01e49d4bb8ee2f093a598557a4ceb044d106c0859f6c574702da71bd2546e175f97cbb81ebd722eec51639df0864d0e0da553aa1e9dcff704b4c6c76892ada318a12b50a04dfc18a29c44e922ffce8d899d94f2822cf44626a6fd1001c5db2c51d36d3fe02b2af30edff43c129b9285c849e9fee6da4e7ac9ce8b7343313ea9ab87246790978ad8bc622c72d068f8c882356b4e4600892ac6b196900ac4cb5728b0c04e7c7cf9c474d81da8ca4a67ba4b3d02c42933bf43b071bf4be23c15167c127f3409e43f38ebaf30cd52753c1214809a163f6dda390198205fb6adcb40115983bf03407c98d53ba8c45e0ab5c9a6b6c69e8d9815"], 0x1002) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000001180)={0xa, {0xa, 0x1, 0x2}}, 0xa) 03:00:19 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x44000, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000080)=0x50f5) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 03:00:19 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580)='/dev/bsg\x00', 0x200801, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000005c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x9, 0x8000) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000640)={0xe66b, 0x19, [{0xf}, {0xd, 0x1}, {0x3, 0x1}, {0xd}, {0x6}, {0x2, 0x1}, {0xd, 0x1}, {0x7}, {0xa, 0x1}, {0x1}, {0xe}, {0xd, 0x1}, {0xa}, {0xd}, {0x3}, {0x6, 0x1}, {0xa}, {0x4}, {0xc, 0x1}, {0xe}, {0x3, 0x1}, {0xa, 0x1}, {0xd, 0x1}, {0x7}, {0x9}]}) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="80040000150008002cbd7000fcdbdf252c070001010087fa366ad1fbe7fd29880c6dd8db17702c88bcf030a685dae5fd78b0457770ec3109820009e7a01bd495cbea5a243adae5cdfdf2198c2ad16a1dbbfb8c9931afce88493cc46ef7da84d9ffd6a086bf56f578904c607a261c3be8b4cf5c40edcc78fff07a1e4600d255b437908f9b5ff5c286d02fb19174cec50729c5f2c5efbb866a4aaaa9794b3e6455dfbc0c04d80c3287ee12dc0eab1828fc965d12a7ce6b71ab23b4eff52ce5061dcc3f1b4d641210ea8fa27f0ebd6bb19153b306466f90e7def8e5554339419c06bcb9f326c26d9150438695f18ffb872d510bc216622a4b2ad7d336285040a8e665bbca0750a730cf6e6db4adabb2561cb594c4bee0d6362b2b2865f0663e8700010096440f8c1675190e29f8612baee9c55621d40aa791cbb9187bb231822a20525eb1e624ec34627240fb619cf29541eb16cfbb8af3b873fbde857f28435ee1b5a9a48504df2577400a97765f7ddc6b90fed34a5d487d5908d24a38dfeb91699003e8a25c2848574f36b19973227ef1fe59face6c2ea2c01a2df64703e13c1b7afd97a9c000870001001303fa0c6e4fb8503f61351c4aed8254491a0865ffadec3b757b5541f241f9efcca3a304a5f8cd543f931879ba66aed3a2b3b91b6804fe7e8f9925fb369d09fbe551239c888cdc2ad2d62d7e3a4717b403709720c1ef55817242c5a9597dafc0fed15715b6f7653d69ddb81c8c76f47208c6693f709d71eea4e4018c458346ce921af100b1000100b3b9ecaf876e9c3d2171da129d298c86597d6180b90fe3832080b6a4a7d8b62b3816d01a4a171713df9cc72162d725acb13715ce43d17efc3d395c603256aff67a6365c668a545444551e114402213f75cbdf14df41849e1032d55c8e6f611e40eaffa815904b60d497656e517516c3ebc21e977f0b136ea89e1b0d57a0fad35aadaf799f514ae590fa023ed58f4d0d95f5b773e399cf0a1717ddaf5c84c0c90707da4000000ee000100cf6e9d3f633e13afdeefd52e2f210ef4c13dc7ceeeab40de23f2d686d44c226be38f27d3c10749a35248dd675e80eeddd255a994c71b9e9631045b784d536c5b9b9b3460249a1a1c45b70c01d583dce7e289bc886a98d7aade9905b053fef73f81a11669246a64be252f0545371722b4579a2a53460ff2422485b128eadf51f0d42d6256fef56bbffcd5b0f08042423b448d2d5f0cb2146d20bbac12525e94715748855893825edf3fba869b724cd610fe6a5dc672a53e17ae1ca33319047e44756d502983e9a626fac6ca3ce4f76f804554dc654094cb2072cb8dfcf4905b61caeb484cda8c89a03bd90000b700010017736d2538df6142ef5e5fe096c538f9c1b38b8e3c6f8a816fd69fb8b3a1285404fc65e543457a2e29db877feee798a20e40c0dbd1e8b7af2edb4316e809686c5965e470eeca6d48513f8452e3b3c1e01fcb4575386b20448ffe589b0b65cc27c14a6ed614ddb5832144359c9bfb7e1284eb84a2d98d345f36bac4d887807c3187995619dabb8b25ae7bb07787fdc07c31065a28259d25a93989c21a05a2fbde67c9a06b1d6734dc5d6dc354d481ce88be8b5b000000000000000000000000002720"], 0x480}, 0x1, 0x0, 0x0, 0x4000}, 0x24000806) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000080)={0x2, "5498fb44cc188f55b66ffa76604d564dfe8011278b5b04ca9a33952328a18c1646c4a51f5ae28e6cb01df2dec6c3b956f95e1751d38d6408c35405310c753b99bee0e8733fa1bbbba5bec8060a9556c4ed9b961eed538db0de35e68d9b52d5eed4653c290ac5b9f4b38656fe26da4c853acb3c3e8aebbcee74ad02455c628d46f5c4ccc88e7b5227cc8b55fbda12f11ef1a6f3363ec003270ac83c3d196e08545bebc206eef907cf32a14d0082092a4892b1ee7a461e3633c018108a8709a1a6b759e9c992cc8d023d8c1128810b70e88996a93ada418f21d8b5750418b097a5f865843b2b6664ffadd0ade2d5ba576c8a5d308ea625f5c13d577b979a87afe2"}) 03:00:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x50202, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) 03:00:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x200, 0x1, 0x83}) 03:00:19 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000889) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x181942, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000140)={0x3e, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0xffffffff, 0x1, 0x80}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)) 03:00:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x40, 0x1, 0x1}) 03:00:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x10000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c0100001200000125bd7000fddb200090000008000000950300000600000000100000010000000100010000000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="08000000040000000600000001000100340001000c5f115c2d8201bc2fec527b1916d26b8b461408b5c3924059bfcc07996339821bede7033f5e2d8d6142e2281c65cef94f000100764afef52c913c16cf2f7ceb8b8d959cf90d6459a78a147a6ad33a727262540b097d63f63057dc1bc1c7a11ba6af0df436f0436b61b4813db4c141efcceabfc5f2125c481d3b7c449f2f26008c000100336347e2d8f6d54d3f4e2eac697f61a232636ca1126ff41924dbaa89476db1f0974191387adb346e0f2d1b7d2583de211fda56ba1706b4da8cf0c0203d7f4b5b659181f7e796aa8245393c7c58ca625bcd2cb88c70e9192021e24c5402a279d63a76f264466574af230f6ca0e75534e45ac36b9851d3fdcf879681652f419d7d8654d513c31adb792f0001007b4b5bfcb34363bbf1a591da0aba23148613fd601b7087130597efff853b859f8e9f8598a1890d3096843e00"], 0x18c}}, 0x40081) 03:00:19 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000083843fd17e7125a4b42ffaabea1f203818999d5c5ce97c2cd73a9bda602e0ef10f3906cf1f95d5af776ee1d7401a99170562a3cbf044949eedd13fe2c1515d688440c1dd5140a2eb5da993dc57b65ceb95959fb8ebac272314550e28d8ac943bcbe6e7abf80f220d5ee2210c7d61a5ea4569fd796698e548ab42c04ea2982b23e7798393369316680860f4289317e78a6fc5e23a623bd3a813193817a0b88b45ebb4a386d24faf6d09fa2822ee06320a3d924a492ba0db5d96", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250700000006000300010000000500040020008e72a36621000100000005002200010000000c000f000100008000000000"], 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 03:00:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) read$snapshot(r1, &(0x7f0000000140)=""/182, 0xb6) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x3ff, 0x7}) recvmsg(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000dc0)=""/4, 0x4}, {&(0x7f0000000e00)=""/231, 0xe7}, {&(0x7f0000000f00)=""/65, 0x41}, {&(0x7f0000000f80)=""/167, 0xa7}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/44, 0x2c}], 0x6, &(0x7f00000011c0)=""/171, 0xab}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x200, 0x70bd26, 0x25d7dbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:19 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x141000) 03:00:19 executing program 1: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:19 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe20000001, 0x0) 03:00:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x4422a0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 03:00:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) socket$kcm(0x29, 0x7, 0x0) 03:00:19 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x301000) 03:00:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x70, 0x191440) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x2021c0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x31cb3000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 03:00:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x8, 0x200, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x10, 0x1, 0xb5af, 0x4}}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x20004001) recvmsg$can_raw(r5, &(0x7f0000000500)={&(0x7f0000000240)=@un=@abs, 0x80, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000001900)=""/112, 0x7}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000001580)=""/103, 0x67}], 0x7, &(0x7f0000001680)=""/194, 0xc2}, 0x2040) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x6841, 0x1, 0x10}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r3, @ANYRES16=r7, @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x4000184}, 0x0) 03:00:19 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x400c2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 03:00:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) r1 = socket(0x2c, 0x3, 0x8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4091) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 03:00:20 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x35}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8000, 0x1ff}}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x6801) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x66, 0x6, 0x4, @dev={0xfe, 0x80, [], 0x3b}, @dev={0xfe, 0x80, [], 0x30}, 0x700, 0x7800, 0x1, 0x5}}) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x282203) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000020}, 0x40010) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x321000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x227b, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4000008, 0x2009, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0xe7, 0x0, 0x8e}) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000040)) 03:00:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x401, 0x9, 0x403}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc00}, 0x20000001) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000000080)=""/144, 0x90) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x80202) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x7fffffff, 0x9, {{0x30, 0x4, 0x2, 0x2e, 0xc0, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xb, 0xbd, [@loopback, @remote]}, @end, @noop, @timestamp_addr={0x44, 0x54, 0x2e, 0x1, 0x4, [{@empty}, {@remote, 0x3}, {@broadcast, 0x3ff}, {@remote, 0x9}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xea}, {@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x1f}]}, @noop, @noop, @timestamp_prespec={0x44, 0x3c, 0xd9, 0x3, 0x3, [{@private=0xa010102, 0x2}, {@multicast2, 0xfbb}, {@loopback, 0x30}, {@multicast1, 0x1}, {@private=0xa010101, 0x273fe81}, {@local, 0x8}, {@remote, 0x9}]}, @rr={0x7, 0xb, 0x67, [@local, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x27, 0x3, 0x0, @mcast1, @mcast2, 0x700, 0x10, 0x0, 0x554d3f13}}) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x200, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x2481, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004094) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x12c, 0x13, 0x100, 0x70bd25, 0x25dfdbfe, {0x25, 0x1, 0x1f, 0x9, {0x4e20, 0x4e20, [0x8b0, 0x7, 0x74fe68ea, 0x1], [0x1b, 0x2, 0x3, 0x9], 0x0, [0x2, 0x6]}, 0xcc, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "7278ae1e74d8e37d5aa86c22725388785a14098f6710054ac419125eac09b23e1dd39f4b2ebf1c6dc068acfa741af3d81381dc027bd2dc1c582b7b34ec0bafdb60d62b8ef5930f691380f59f1e0f260df8304c25b9bf3f59b4c6a8142645abacfb619f5cf61d9ff730c44ce81ddf486d70c016cc4dd6b88d7c783dd57e64f1fc9a5839bc1343c203b61bc1c476252424ef33275639a0d6125e8bbd1e64c6855c6c94d71e487ab876c5486b6148f29ee441418ca544f0312b90cce9edefd1ea7922f3ea53f5f590dd6f567f9badd9cf3467c0f606bf66d69f7b"}]}, 0x12c}}, 0x4004000) 03:00:20 executing program 2: r0 = socket(0x1b9f8b96a7e2ea42, 0x4, 0x5bed) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0x5, 0x7, 0x81}}, 0xa) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xb52, 0x8002) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x200, 0x4) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, 0x4}) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0xa, 0x2, 0x4}}, 0xa) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x200, 0x100) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x800, 0x0, 0xa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x4, 0x13}) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x4, 'syz1\x00', @default, 0x80, 0x0, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x464400, 0x0) write$FUSE_WRITE(r2, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x1}}, 0x18) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x3fc0000, 0x7ad, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4}) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x1, @bcast, @netrom={'nr', 0x0}, 0x5, 'syz0\x00', @null, 0x1000, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @default, @default, @null, @default]}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x422000) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@remote, @bcast, @remote, @netrom, @rose, @remote, @default]}, &(0x7f0000000040)=0x48, 0x800) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) write$UHID_DESTROY(r2, &(0x7f00000002c0), 0x4) write$UHID_INPUT(r2, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) getsockname$netrom(r1, &(0x7f00000001c0)={{0x3, @bcast}, [@null, @default, @default, @remote, @remote, @netrom, @default, @default]}, &(0x7f00000000c0)=0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x0, 0x0, 0x3a3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x4c}) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x80, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x40000) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x400, 0x4) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0xa2, 0x4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x97b, 0x20}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x20000, 0x0) 03:00:20 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f00000001c0)={0x38, 0x1}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'team_slave_0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008090}, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 03:00:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0xfffffffd, 0xd0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x49, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x202300, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) getpeername$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x3}) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x101440) mmap$snddsp_control(&(0x7f0000ff1000/0xe000)=nil, 0x1000, 0x2000004, 0x10, 0xffffffffffffffff, 0x83000000) 03:00:20 executing program 4: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x4, 0x9, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x800) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x3, 0x2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x800) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfd0c, 0x1) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xe, {0x3, 0x51, 0xa5, 0xa5, "9ca30ca111e4830fdd311669e74f2774b7a0931953ad2543ab10ee5b5b5e33a05fe74a18643f1c4e6491ed07cd2e117e71663cad43d8e93774cf974fe4f6f0764ea47b66bbb529e57b78dddd51c34e70f59147bfc87e5ec49d175b14b43b988ef61bad9dcec2a722053c2947a13b763eeb330955ea4d06c9cd1ae35f1e03d401ffa3141323350433ef6fff094b6a690b3553b4e68c9ac42d88610250d38b4419a74a53ea95"}}, 0xb1) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000021c0)={0x58, 0x0, r1, [{0x1, 0x1, 0xf, 0x1, '/dev/dri/card#\x00'}, {0x2, 0x8, 0x1, 0x4, '.'}]}, 0x58) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xd750, 0x100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r2}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x100000001, 0x1, 0x40}) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5}) 03:00:20 executing program 4: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000080)={0x2, "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"}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x80800) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000200)=0x1) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x20400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x80000001, 0x8, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x1f, 0x31, 0x3, 0x3, 0xb2, 0x6, &(0x7f0000000140)="448aeb06512192741e427e7de0c9dedac981914dfd3c3f14a301bfa0ba786cb840192a6d1f9a81a79ab7f48dc3a1c10364ac86bc2efbb04560c2e0360cd84bf460818aed5d1a91cd2f3b5a6de4ee6f8df639d775d1d24baaf32340d92a4d3ba3450429f13ff9244c1ef10b485a1097fb43d7ba721928a14a2c0820f7214aadc9c71e410467d14ebfd1d81ac61ab5b8694ebd25ef4719d643d2dbe460219b573e2376f5d548ac3fefe50db247a62c74cfc938"}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x200140, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000000c0)=0x1) 03:00:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = socket(0x11, 0x800, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000001500), &(0x7f0000001540)=0x4) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000002940)={&(0x7f0000001240)=@l2tp, 0x80, &(0x7f0000002840)=[{&(0x7f00000012c0)=""/16, 0x10}, {&(0x7f0000001300)=""/248, 0xf8}, {&(0x7f0000001400)=""/225, 0xe1}, {&(0x7f0000001580)=""/163, 0xa3}, {&(0x7f0000001640)=""/189, 0xbd}, {&(0x7f0000001700)=""/108, 0x6c}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/179, 0xb3}], 0x8, &(0x7f00000028c0)=""/66, 0x42}, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x56, 0x2, 0x2d}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, 0x9a010, 0xffffffffffffffff, 0xfe513000) 03:00:20 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001480)={&(0x7f00000012c0), 0xc, 0x0}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xb8, 0x9, 0x101, 0x0, 0xfffffff9, 0x8, "6a210c79784ef81f9cef49f59d1cbf0e9b0e0eb54608cbe3e7fcf24a347c142886fef6d01d00137449e3a5490d0f0b69740e9bff134ed354e96f71ab5391b76780c27db7676e6d3db9a2f9611c4b7e8117a75ebbdb43b5d8b31413cd1c38a2c2c0c125fd625c39e02ee4fc0ae57adb349fd50e880bfb5b1a5f3532031ce9dd36379bd8860d03711a368bfff32c2b0897639327eef2070e89b244bc2188a7cceda662d24b1080b3399afd8b5659f69842a1f7d98e5e3926f8"}}, 0x1d0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x511102) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001340)={'syztnl1\x00', &(0x7f00000012c0)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0xa, 0xffff09c3, 0x4, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x20, 0x7, 0x8, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x11, 0xa, &(0x7f00000001c0)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @func, @call={0x85, 0x0, 0x0, 0x5d}, @generic={0x5, 0x3, 0x8, 0x9b, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x2, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x4, 0x4}, 0x10}, 0x78) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x34}}, 0x20000800) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x40}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x2, 0x31, 0x5, 0xfffa, 0x91, 0x8d, &(0x7f0000000140)="a4b25bab682b3f762951d5c0ba17302bbbc87b91e372408ab827d39c9d1b6acf9c69b391bd33de6b5cf6f176a14f13696027d2c877136e4c51920ac475d2d7d9e758b162a46e76173a589f7a86fba57d22b076a0c20d5f0e8f0c3478789a80be63c6a160edc905bdb059677f080cdfd4eb06ba52a1417ae45568f0dc4a314629aed187772d022661cddbe906fd38b07fd3"}) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x3}) 03:00:20 executing program 1: accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x8, 0x0, 0x0}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000280)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x401, 0x4, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000380)={r7}) getpeername$l2tp(r3, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x1, 0xffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r7}) 03:00:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) 03:00:21 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='svcrdma_no_rwctx_err\x00'}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x12441, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000080)={0x4, 0x1}) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x26, 0x121001) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x30f, 0x20400) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x21}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x400008, 0x2, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:21 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101400) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x4}) 03:00:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0xd30, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x30}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000841) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:21 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0xff, 0xdcff, 0x4, @dev={0xfe, 0x80, [], 0x30}, @private2={0xfc, 0x2, [], 0x1}, 0x700, 0x40, 0x4, 0x6}}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0x6, 0x400, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x497800}}, 0x18) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x1, 0x0) write$FUSE_GETXATTR(r4, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x2000}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040844}, 0x20048006) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20008004) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x90) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:21 executing program 4: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x6, 0x101, 0x37, 0x3ff, 0x101, 0x3, 0xfff}}}, 0x60) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x4048890) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x80001, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4806}, 0x48800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2e8afac3, 0x80000001}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000805}, 0x40004) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x3, 0xc}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x329}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000180)=0x4, 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0xc1bc, 0x1000, &(0x7f0000000080)="7fba6736e1f01cd24a13406e9798adcebf4fae0a2bbdb689e4c16a43faffa8b72d156d25eb74d0c816c8b0e3a20a18a2964960092099317eef0d2641deaf03d3c007daab42267692538e5323c07b511b6f29f96c4d56e9f176f1f37ccb22351f075dbc4f823f227a7e3abce4438d50"}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x1200009, 0x400}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffff, 0xa0001) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1, &(0x7f0000000280)=""/211, 0xd3}, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:21 executing program 2: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000017, 0x100010, 0xffffffffffffffff, 0x83000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x3, 0x4) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x4}) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x1b3000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000011c0)={&(0x7f0000ffa000/0x3000)=nil, 0x4, 0x0, 0x4}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/4096, 0x1000, 0x9, 0x0, 0x1000, 0x8440, 0x4}}, 0x120) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0xfffffffd}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0xfffffff8}) 03:00:21 executing program 2: ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x8040) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0xd}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000140)={0xe, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x40, 0x761200) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) read$usbfs(r2, &(0x7f0000000180)=""/200, 0xc8) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x8, 0x10c00) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f00000002c0)=0x5) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x600) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc, 0x4}) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000020c0)=0x3) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 03:00:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80080, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x42, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x9, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xa, 0x9, 0x400}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x3) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x202200) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x80000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x10001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf25070000000c001600000100000000000006000100000000000500210001003ab1"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x101400, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, [], 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xffffffff, 0xffffffff, 0x1ff}) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffff00000000, 0x111a40) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f00000000c0)) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002140)={0x4c, 0x12, 0xc, 0x70bd26, 0x25dfdbfe, {0x2b, 0x3, 0x1, 0x7, {0x4e24, 0x4624, [0x1, 0x240000, 0x2, 0xffffffff], [0x2, 0xe9, 0x8000, 0x5], 0x0, [0x7, 0x3]}, 0x9, 0xd6f9}}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040090) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000020c0)={0x20, 0xfffffffffffffff5, r1, {0x7, 0x4, 0x14ba, 0x8003}}, 0x20) 03:00:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x181101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r2}) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00003d", @ANYRES16=r2, @ANYBLOB="00022abd7000fbdbdf25040000000800020001000080"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xefb, 0x5, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x200c40, 0x0) syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x4, 0x101800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r3}) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x40300, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0xfffffffe, 0x3, 0xe903}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x599202, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x2}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000001200)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x5, 0x2, 0x2, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7800, 0x8, 0x7, 0x7f}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x20c, 0x9}) 03:00:21 executing program 2: r0 = getegid() r1 = getegid() syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x10040) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0x78, 0xfffffffffffffffe, 0x0, {0x8000, 0x5, 0x0, {0x4, 0x8, 0x7f, 0x94400000, 0x26, 0x630b, 0x9, 0x101, 0x2, 0x2000, 0x200a, 0xffffffffffffffff, r0, 0xf0ab, 0xc6}}}, 0x78) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x4c80, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x6, 0x2, 0xc000000000000000, 0x8, 0x8, 0x10001, {0x4, 0x9, 0x1, 0xff, 0x8, 0x3, 0x9d8, 0x6, 0x0, 0xc000, 0x80, 0xee00, r1, 0x7, 0x7}}}, 0x90) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000000c0)) 03:00:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f00000000c0)={0x12bc, 0x13, 0x200, 0x70bd26, 0x25dfdbfc, {0xb, 0x6, 0x41, 0x3f, {0x4e20, 0x4e23, [0x1000, 0x853, 0x39, 0x4], [0x3ff, 0x7, 0xffffffff, 0x2], 0x0, [0x6, 0xc8]}, 0x1ff, 0xab5b}, [@INET_DIAG_REQ_BYTECODE={0x84, 0x1, "e2a67de587c2b992cc75ae81628b522dd5e1728ff429e6d5d967ae63216283f01ceaaa20d04f4414332adb754e3beecbc6d41fad7a60c4aa262fe87657642f02d5fc75272dbf89aeccb11383f98b9fce791c23a832bcd72841d392264d70921d5c088b108b30130cbc6ead77e095574d6e695df3ae2aea93f05a81493b9bfe01"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "0e2928cc41100a6663b1d7f78404f6b2e41a0fbe98e76a01daecf54dd44b78aa"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "2bbccb9b3c0ee41fb273c619a16d5962ce8f737ec24b77deba629682b0f7a01326261dfc0c19fc8ca4ef88144c05ee4a8b7c7ebf719f15817898f2da0e39fb355d0e4dca658009419c656476934189357f90110c23424dc5933d7633ddee6bcd4d39e5821630"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "72e35d802654869ec90dd50ec6cf42c29080b6b37f880dc9b32c16e688beedbf7f6b583fa42eb7420e78a94caced3f792c0463b0bbae166fe250f05a89b305735a0ee9969cceef593cdebd8eca258ff9ef30f0e84cfdf7579db69c9a49f39f2ca90ccdcc26cd21054b36e0225c397ebe84e82719a9c3d61e1753f31249d15d30509a8af010e85d4fc583847b27d4df9c9e454dd13c19774aa4b86ac5a2cc43d3f9d9197c3d4d91330776f189cfb7416f75eee4fa5152e6c530de80c7e7ea783af0316c4884151e6eebd99cfad7fb6465ab3ebbd08563bce81c81e8d1"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "a3531a9e443be45308400f6dbb40d77fff9390d09f080b67d1f4a237739622af97a5ddfc29d40df1172700d2a8f38fd8ad10e411c08d4ebb3f77e8eb080475e8ab922cc657aedad2890c1cf5132da18efca35291e4cc50ca042f6c9a72a8e9bb34185a6ce4224253af4f8ef997cb1770f6601ace"}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001500)={'syztnl2\x00', &(0x7f0000001480)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x5, 0xbf958671, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8000, 0x801e, 0x401, 0x8}}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001640)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xa4, 0x12, 0x8, 0x70bd2a, 0x25dfdbfb, {0x23, 0x20, 0x7e, 0x20, {0x4e21, 0x4e23, [0x2, 0x3, 0x2, 0x9], [0x401, 0x9, 0x6, 0x2], r3, [0x6, 0x101]}, 0x9, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x56, 0x1, "d92142db7d4cc05777a592a961ef87daaee0137c293a189e9af4ee1f616732f92a15ca1c0a656668145de83e732ceb213b3bd4d6eba6e11cdf31b186d2fa65b3e7430c08e160adf06413858258759faf0c37"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x10000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x208002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x20, 0x3fb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80, 0x393240) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) userfaultfd(0x800) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) r3 = getegid() write$FUSE_ATTR(r1, &(0x7f00000020c0)={0x78, 0x0, r2, {0x52, 0x3, 0x0, {0x3, 0x7f, 0x0, 0x100, 0x3ff, 0x4, 0x6, 0x5, 0x5, 0x6000, 0xda, 0xee00, r3, 0x7, 0x4}}}, 0x78) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2ad6, 0x80000) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/107, 0x6b}], 0x2, &(0x7f0000000200)=""/69, 0x45}, 0x2150) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x38300000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x0, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x202000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000000c0)) 03:00:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0xd02, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x8, 0x3, 0x40, @local, @mcast1, 0x700, 0x7, 0x1, 0x4}}) r1 = socket(0x2b, 0x6, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000026c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf2552ddee4b20000300", @ANYRES32=r3, @ANYBLOB="06004800110000000400cf00050089000d000000050088000200000005008900060000000800cb00000000000800cb0009000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x58, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, [], 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1d}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x800) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10, 0xfffffffffffffffe, r4}, 0x10) 03:00:22 executing program 4: r0 = socket(0xf, 0x3, 0xa17) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x40}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}]}, 0x3c}}, 0x4000) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) write$FUSE_POLL(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5}}, 0x18) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x8001, 0x5, 0xa3}) 03:00:22 executing program 1: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000001180)={0xa, {0x4, 0x4e, 0x2}}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1b8, 0x0, 0xffeffef6}) ioctl$USBDEVFS_RESET(r1, 0x5514) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x54967000) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="87b100000000000081078d03860c0686078c888b8f04820d"]) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400800) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfff, 0x210780) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10000, 0x8000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x202200) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x72fe, 0x8000009, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x0, 0x4, 0x1c, @mcast1, @loopback, 0x1, 0x40, 0x4, 0x7fff}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8510004dfeffffff7e38cbedf07fffff"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, [], r1, 0x0, r2, 0x8, &(0x7f0000000740)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xc, 0x9, 0xbd}, 0x10, 0x10347}, 0x78) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000180)=""/152, 0x98) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000240)={0xf9d9, 0xd, [{0xe, 0x1}, {0x3}, {0x3}, {0xf}, {0x1, 0x1}, {0xf, 0x1}, {0x8, 0x1}, {0x6, 0x1}, {0x6}, {0x9}, {0x1c, 0x1}, {0xf}, {0xe}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0xfffffffffffffffe, r4, {0x81}}, 0x18) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x0, 0x1}) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x98800) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x400002) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1, 0x4, 0x8a}) 03:00:22 executing program 2: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0xfb4d88bbf381c618) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:22 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002100)={0x78, 0x0, r0, {0x0, 0x5, 0x0, {0x4, 0xc38e, 0x2, 0xfffffffffffffff4, 0x6, 0x26, 0x80, 0x9, 0x1000, 0xc000, 0x8, 0x0, 0x0, 0xfdb, 0x3}}}, 0x78) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020025bd7000fcdbdf250800000008000c000200000008000800ffffffff06000b002c00000008000400ffb054832a000700ac1414bb14000500fe88000000000000000000000000000114000600fc01000000000000000000000000000114000500ff010000000000000000000000000001"], 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x20008800) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x2d9fcc7f, 0x2001) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a080, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x1063, 0x5, 0x10001}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x87, 0x181200) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x4}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 03:00:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7000000, 0x30, r0, 0xc7c73000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10080, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8d) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1a99f871}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x45}, @NL80211_ATTR_PMKID={0x14, 0x55, "d737ca2571c37b1ae641656e5cb53d7a"}, @NL80211_ATTR_PMKID={0x14, 0x55, "b73720470d22cbee88bcd645fa11c0bd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b03699910000008035ae9c867eae7000"}, @NL80211_ATTR_SSID={0x16, 0x34, @random="ab54ec52a788f97ec41ce58792981521400b"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040801}, 0x8000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000002200)={0x90, 0xfffffffffffffff5, r2, {0x4, 0x3, 0xfff, 0x1ff, 0x7fffffff, 0x9, {0x5, 0x2, 0x8, 0xcad, 0x2, 0x7, 0x7f, 0x6, 0x1, 0xc000, 0xff800, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f}}}, 0x90) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000811}, 0x20000000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x5}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x6}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4bb2, 0x194}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048049}, 0x20000094) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = geteuid() geteuid() write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000040)={0x78, 0x0, 0x0, {0x81, 0x6, 0x0, {0x5, 0x1000, 0x5, 0x3, 0x4, 0x6, 0xffff, 0x1ff, 0xffffffe1, 0xc000, 0x5, r0, 0x0, 0xfffffeff, 0x2}}}, 0x78) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x10501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xffffffff, 0x3ff, 0xc8d8}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x490200, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x40, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000001c0)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) socket$inet6_udp(0xa, 0x2, 0x0) 03:00:22 executing program 2: ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x111900, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x7, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) 03:00:22 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x400400) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x6, 0x0, 0x9}) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x21}) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x0) r0 = socket(0x11, 0x6, 0x3ff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x72bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0xffffffffffffffbc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xcac}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000000) 03:00:22 executing program 4: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x24}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20400, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/108) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x2, 0x0, 0x82}) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x10000, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000380)=0x7f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x208, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x25f7}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xfffffffffffffff8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0xfffffffffffffff8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x10000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x100}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x400, 0x4, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x989}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}]}, 0x48}}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f0000000040)={0xffffffffffff8000, 0x8}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = getpid() r6 = getpgid(r5) move_pages(r5, 0x2, &(0x7f0000000140)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000180)=[0x3f, 0x1], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x6) r7 = getpgid(r6) capget(&(0x7f0000000200)={0x19980330, r7}, &(0x7f0000000240)={0x6, 0x7, 0x3, 0x5, 0x3, 0x5}) 03:00:22 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0xffffffff, &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x4, 0x4) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x802c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_DESTROY(r2, &(0x7f00000000c0), 0x4) 03:00:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = socket(0x5, 0x800, 0x19) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x31c, 0x12, 0x400, 0x70bd26, 0x25dfdbff, {0x5, 0x7f, 0xff, 0x11, {0x4e23, 0x4, [0x400, 0x7ae, 0x3f], [0x3ff, 0x3f, 0x7fffffff, 0x8], 0x0, [0x20000d69, 0x7]}}, [@INET_DIAG_REQ_BYTECODE={0x83, 0x1, "1412571a1f975d376aafa50bdeda28936890abe9a87cf7bf799ccebc4364536e2ac7e33a41e7b40df1b7749b25f00d99899b5a2188d5beac2bc1b15762e6f4beb6e449c2f40abd891be9f5d5646c030b98ee3b73296eab983f3c055e8fd33bf3f37b24833fae82aa503a16b04b6f04644c83b8b7e721914a911daa9be63cfc"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "3a3cf917e732fafabd7459d57dbc7fb7ad4b56e2da4fb2ea55648c1f331d9f8e22ad8bec7dcb304b5b2abfa972936fa2ec7cd707d403fee368cdf9873cce2eb7afd7b7b205438674f98bcec4d6bc8968037a88406d1b3bcbb853c2fb84f2025f5987ed2a38bc35195927a8afdbc5c0bb34a34d00cb16075e80190eb41a55e7b9891e030d1e18089f83bbed18482b550d7b26714b84ec8b2ca38da97418e74775ea67496a2babcbfe5f1a08b00ba32fe7c859e72c7aafe8d75960097653279609def8b46a6816ce90cf47153698caf8"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "7bcdccdb129e6fa43a364a21d2fdbcfa5c70ae15f7652b4cdacc0d1a0b54ed5d5d10c402c3fec969e3e3dff775a233de1caa3de1f8d89997ddb6145d8cb49c9499ba61dda965be1bf728cec79ef0071b3ac8610b01772721591551c3849522a2a302c8f892d1d3f30085d508109523ed846504ea527394b693ded3c521e23ee285f46d888baf767229d31c8760a3110bc965be31708d7449effaff4292c3"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "0fb3e0700723e5bd1d12d8871193976f6556b06f1e1173add60603d0d087632d15f09747a17a277b3b040fea90ed7d714a399931eaaaaec10385c18fc1b675451c8cc60d9a65917c80216893140933a51d17de6265fe2113096c696fcb67e8014e5b288eb3e98fd488f926d1aa5aa7f56e7a2e1a8ee3b241e04c998ab69fd40284212d0f871bb3c228fc0b62f88300d29c4d9a238a6cb99ea4a163e5367e91319faebce259d1c0d1e6a89e9169fe2764e94154fa8e21967960dd2c0c7aca9b9cfef4f34ba499c4d36dd5d03952ef"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4008010}, 0x24000014) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x4, 0x5}) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x43adb9f685fbe2ff}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9a56, 0x59}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000005, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) 03:00:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80840, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, {0x3, 0x7, 0x9, 0xd1, "3345be8b34490435af2ebd7ec4da0f9ceecb678bce569935ca81ec7f9b728a4cb4d132334a1e874017178a82786aeba4ef67a354e3c065b645d47e125cd7fd359ee393166204cd1a8b4b774555b5ffee0b342dd03f6fe30caa5477ba4acfdd61dc12a1c2ba934bb2520f097ab3c64dd847d54686dacf22504812471a5e36d9390259e58f30d94269771cd8897c29df92022a41cd17b2b3cf275b322e4917f235cb264837708ae01c088681ce79c64b9ad89dd26f17f8c0a4c45bce642b3e5c5a47a07b245ac0a82058e45fb8291fbfbc9a"}}, 0xdd) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8c) 03:00:22 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f000100", @ANYRES16=0x0, @ANYBLOB="020001000000fbdbdf250300000014001f00ff010000000000000000000000000001050005000100000006000200010000000c000f000000000000000000050014000300000014002000fc010000000000000000000000000001080009000000000008001700", @ANYRES32=r1, @ANYBLOB="06001b004e2400000500060003000000"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0xc020) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xf25d, 0x7f, 0x5f312873}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 4: mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0xffffffffffffff8e) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x20040) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x40080, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100)=0x43d, &(0x7f0000000140)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x7, 0x208502) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x6, 0x10001}) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400000, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x14, 0x7, 0x7, 0x4, 0x1, 0x4, "b748a209fd1332e2efa364415045becc5d461ae7"}}, 0x12c) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0x44f) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x80, 0x80, 0x20, @mcast2, @empty, 0x1, 0x8, 0x34, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'tunl0\x00', r1, 0x7, 0x40, 0x6, 0x3ff, {{0x17, 0x4, 0x1, 0x5, 0x5c, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@cipso={0x86, 0x19, 0xfffffffffffffffc, [{0x7, 0x9, "9368a94bb8bdbd"}, {0x5, 0xa, "55ccf36769e17720"}]}, @timestamp={0x44, 0xc, 0x7, 0x0, 0x9, [0x96f, 0x1]}, @lsrr={0x83, 0x1f, 0x84, [@private=0xa010101, @private=0xa010101, @multicast2, @empty, @rand_addr=0x64010101, @multicast2, @private=0xa010101]}, @noop]}}}}}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1ff, 0x2d00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x589002) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:22 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x30200) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffc, 0xcf93bf0dee1b1373}) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1ff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x5, 0x4) ioctl$SIOCNRDECOBS(r1, 0x89e2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/211) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x6, 0x8, 0x0, 0x0}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000140)={0xe, {0x5, 0xd0, 0x3f, 0xad, "de52f0256dca5f9064fc13fb10a9344d9fae206ec86cb7e4e24341ad93602374554d6b7d6a2202659ed1e952e3fc2c8e0d79b9460b8c7e9a2de3ea5324a51084f79d2fe50370766586ab3b9f646375d33b8dd068a4a7e6fd4ae6483b0cf110802959f0a5f678ae27951ecc88f66e9b19793b52e6c6a49d7e3d260f8a184d80211dabdf641c31d07a514edc820ebb6ebb63eead2bdfa6c82f46393d8dc3352c03947e3ef18968a6d92e43880319"}}, 0xb9) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:22 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xc4, r0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x81}, @ETHTOOL_A_LINKMODES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040855}, 0x40004) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80000001, 0x629, 0xd8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) inotify_rm_watch(0xffffffffffffffff, 0x0) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x200000) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 4: recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7, 0x40000000, &(0x7f0000000140)={{0x3, @bcast, 0x7}, [@default, @null, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = socket(0x2c, 0x1, 0x7) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) connect$netrom(r0, &(0x7f00000001c0)={{0x3, @default, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x8}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="001000010000000000000003410400440065000004299078e0000001ac1414bb441096900000000400000081000000094420aa90005b001a00000c3e00000005000000060000000700000040000000ff"]}) 03:00:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xf}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x40) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x4, 0x5, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff7fff}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffffc}) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:00:22 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000180)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x400c1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x41) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 03:00:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x16800, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002340)={0x10, 0xfffffffffffffff5, r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xc6, 0x6, 0xfffff801, 0x8, 0x1, 0x8, "783d6e5974f722322eb5a756a493dddfcd4dc91ea763c1cfeb5d20d20a99fb77559857c0491d9c64c87fa906b60087d1ec32496c122e0c2610a24583fa828381d61d51626fb4c57eecb6e6b695889bf3165854b61d72500c607047b678e417ea222a3823bda776f671af44faf77bc4f068c172af9598bf812c408cc009602a6957236580f6d52698b82149db5f35300855dd3e96c5e2c2366cfc817f638bff4d3ad9d9fe55a0383c970f88d1a2939212c8873e59b672068a0408326e80a055b86b875000a38a"}}, 0x1de) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x140) 03:00:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x43adb9f685fbe2ff}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9a56, 0x59}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 03:00:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x2dab, 0x381000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r2}) 03:00:23 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000380)=0x7f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x208, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x25f7}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xfffffffffffffff8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0xfffffffffffffff8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x10000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x100}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) [ 1497.566763] hid (null): unknown global tag 0x32 [ 1497.572161] hid (null): global environment stack underflow [ 1497.590311] hid (null): report_id 2325938256 is invalid 03:00:23 executing program 1: ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x5, 0x7fffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc0000004) 03:00:23 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000380)=0x7f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x208, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x25f7}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xfffffffffffffff8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0xfffffffffffffff8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x10000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x100}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:23 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000380)=0x7f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x208, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x25f7}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xfffffffffffffff8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0xfffffffffffffff8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x10000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x100}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) [ 1497.625525] hid-generic 0006:FFFFF801:0008.004B: unexpected long global item [ 1497.659859] hid-generic: probe of 0006:FFFFF801:0008.004B failed with error -22 03:00:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x10000, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) [ 1497.679610] hid (null): unknown global tag 0x32 03:00:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x10000, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:23 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002100)={0x78, 0x0, r0, {0x0, 0x5, 0x0, {0x4, 0xc38e, 0x2, 0xfffffffffffffff4, 0x6, 0x26, 0x80, 0x9, 0x1000, 0xc000, 0x8, 0x0, 0x0, 0xfdb, 0x3}}}, 0x78) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) [ 1497.700825] hid (null): global environment stack underflow [ 1497.712305] hid (null): report_id 2325938256 is invalid [ 1497.733628] hid-generic 0006:FFFFF801:0008.004C: unexpected long global item 03:00:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0xa, 0x20}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4, 0x0, 0x90}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xfffffffd, 0xfffffffe, 0x1d6d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400800) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfff, 0x210780) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10000, 0x8000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x202200) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) 03:00:23 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400800) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfff, 0x210780) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10000, 0x8000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x202200) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x2cc0) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400800) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfff, 0x210780) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10000, 0x8000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x202200) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) [ 1497.755896] hid-generic: probe of 0006:FFFFF801:0008.004C failed with error -22 03:00:23 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400800) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfff, 0x210780) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10000, 0x8000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x202200) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) 03:00:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0xfffffffffffffffc, 0x5, 0x7}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) write$FUSE_ENTRY(r1, &(0x7f00000020c0)={0x90, 0x0, r2, {0x1, 0x3, 0x1, 0x462, 0xffffffff, 0x80000001, {0x2, 0x8, 0x4, 0x1, 0x9, 0x6, 0x4, 0xfffffffe, 0x2, 0xc000, 0x5, 0xffffffffffffffff, 0xee00, 0xffff7fff, 0x80000000}}}, 0x90) 03:00:23 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400800) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfff, 0x210780) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10000, 0x8000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x202200) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) 03:00:23 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0xd02, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x8, 0x3, 0x40, @local, @mcast1, 0x700, 0x7, 0x1, 0x4}}) r1 = socket(0x2b, 0x6, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000026c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf2552ddee4b20000300", @ANYRES32=r3, @ANYBLOB="06004800110000000400cf00050089000d000000050088000200000005008900060000000800cb00000000000800cb0009000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x58, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, [], 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1d}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x800) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10, 0xfffffffffffffffe, r4}, 0x10) 03:00:23 executing program 0: r0 = socket(0xf, 0x3, 0xa17) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x10000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x208002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 03:00:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00003d", @ANYRES16=r2, @ANYBLOB="00022abd7000fbdbdf25040000000800020001000080"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xefb, 0x5, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x200c40, 0x0) syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x4, 0x101800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r3}) 03:00:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00003d", @ANYRES16=r2, @ANYBLOB="00022abd7000fbdbdf25040000000800020001000080"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xefb, 0x5, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x200c40, 0x0) syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x4, 0x101800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r3}) 03:00:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00003d", @ANYRES16=r2, @ANYBLOB="00022abd7000fbdbdf25040000000800020001000080"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xefb, 0x5, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x200c40, 0x0) syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x4, 0x101800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r3}) 03:00:23 executing program 0: r0 = socket(0xf, 0x3, 0xa17) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x101400, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, [], 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xffffffff, 0xffffffff, 0x1ff}) 03:00:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc, 0x4}) 03:00:23 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0xff, 0xdcff, 0x4, @dev={0xfe, 0x80, [], 0x30}, @private2={0xfc, 0x2, [], 0x1}, 0x700, 0x40, 0x4, 0x6}}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0x6, 0x400, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x497800}}, 0x18) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x1, 0x0) write$FUSE_GETXATTR(r4, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x2000}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x4}) 03:00:23 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101400) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:23 executing program 0: r0 = socket(0xf, 0x3, 0xa17) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:23 executing program 2: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000001240)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x3, 0x4, 0x1, 0x1, 0x8, {0x6, 0xa1dc, 0x6, 0x2, 0x80000001, 0x5a, 0x7, 0x9a4, 0x1, 0x6000, 0x80000, 0xee00, 0xee00, 0x7, 0x7}}}, 0x90) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40, 0x4000) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000001300)=0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x301200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001200)=@urb_type_bulk={0x3, {0x8}, 0x1, 0x86, &(0x7f0000000100)="662777223b814234fac82e6fd2286acec4359a579786c0d9021247f36605894e856d466a95a9ff9eea476f0c3f3064ce9f0b3c72492fec4d37c36d1a7e2f61e9f2ff7e2979bbaaab0bdbbd77bda01c785afbfff9ee06d29e7f3b081ba588a221a0b17e78746aaeee0f7399d100d8d9af67b046214b6f8d5fcca4b366de3e5c4771e1371a0961dbd5c9df2c4851603cc04989a19363c70480a83581ae238566983f53ae7c0e94314941c4eba7e9fec0034e3512ee181c87762f8698948f1825396d700a8774e06a5c016e5394", 0xcc, 0x1f, 0x3, 0x0, 0xf68, 0x80000001, &(0x7f0000000200)="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"}) 03:00:23 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = socket(0x11, 0x800, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000001500), &(0x7f0000001540)=0x4) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000002940)={&(0x7f0000001240)=@l2tp, 0x80, &(0x7f0000002840)=[{&(0x7f00000012c0)=""/16, 0x10}, {&(0x7f0000001300)=""/248, 0xf8}, {&(0x7f0000001400)=""/225, 0xe1}, {&(0x7f0000001580)=""/163, 0xa3}, {&(0x7f0000001640)=""/189, 0xbd}, {&(0x7f0000001700)=""/108, 0x6c}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/179, 0xb3}], 0x8, &(0x7f00000028c0)=""/66, 0x42}, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') 03:00:23 executing program 1: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000080)={0x2, "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"}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x80800) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000200)=0x1) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) 03:00:23 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfd0c, 0x1) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xe, {0x3, 0x51, 0xa5, 0xa5, "9ca30ca111e4830fdd311669e74f2774b7a0931953ad2543ab10ee5b5b5e33a05fe74a18643f1c4e6491ed07cd2e117e71663cad43d8e93774cf974fe4f6f0764ea47b66bbb529e57b78dddd51c34e70f59147bfc87e5ec49d175b14b43b988ef61bad9dcec2a722053c2947a13b763eeb330955ea4d06c9cd1ae35f1e03d401ffa3141323350433ef6fff094b6a690b3553b4e68c9ac42d88610250d38b4419a74a53ea95"}}, 0xb1) 03:00:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x800) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x3, 0x2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x800) 03:00:23 executing program 0: r0 = socket(0xf, 0x3, 0xa17) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x282203) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000020}, 0x40010) 03:00:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x35}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8000, 0x1ff}}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x6801) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x66, 0x6, 0x4, @dev={0xfe, 0x80, [], 0x3b}, @dev={0xfe, 0x80, [], 0x30}, 0x700, 0x7800, 0x1, 0x5}}) 03:00:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400, 0x0, 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 03:00:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x8, 0x0, 0x17}) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:23 executing program 0: r0 = socket(0xf, 0x3, 0xa17) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x40) 03:00:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x44100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x200, 0x400}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) 03:00:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x81, 0x665, 0x3, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x700, 0x80, 0xfff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0xb8, 0x3, 0x4, 0x20, @mcast1, @private0, 0x7, 0x8, 0x2, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1f, 0x9, 0xf9, @private2, @rand_addr=' \x01\x00', 0x80, 0x8, 0x1, 0xfffffffb}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0xc001) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:24 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x40) 03:00:24 executing program 0: r0 = socket(0xf, 0x3, 0xa17) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x5, 0x400}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf253500f4bf8d6f99de48000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00340002020202020200001400fe0050d996a1fa06c73afd777644dd30f338"], 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x40) 03:00:24 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x40) 03:00:24 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x127}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20048040) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x430460) 03:00:24 executing program 0: r0 = socket(0xf, 0x3, 0xa17) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x204, 0x80, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x92, 0x7, 0x8, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xd99, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000200)=0x9) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) 03:00:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x106, 0x80, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) 03:00:24 executing program 1: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x40) 03:00:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) 03:00:25 executing program 0: socket(0xf, 0x3, 0xa17) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6441, 0x0) 03:00:25 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 03:00:25 executing program 1: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x40) 03:00:25 executing program 2 (fault-call:0 fault-nth:0): syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:25 executing program 1: syz_open_dev$dri(0x0, 0xfffffffe00000001, 0x40) 03:00:25 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) [ 1499.901523] FAULT_INJECTION: forcing a failure. [ 1499.901523] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.931113] CPU: 0 PID: 6677 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1499.940356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:00:25 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) 03:00:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x3770c2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="8fc878c1f000640fc7590066b8b7000f00d80f01c266ba2000ec66b8ca000f00d8c4e3596d7c45630066baf80cb8b445ca85ef66bafc0c66ed0f186700650f01ca", 0x41}], 0x1, 0x21, &(0x7f0000000140)=[@cr0={0x0, 0x20000000}, @efer={0x2, 0x8800}], 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x4) [ 1499.951779] Call Trace: [ 1499.955914] dump_stack+0x1b2/0x281 [ 1499.959693] should_fail.cold+0x10a/0x149 [ 1499.965078] should_failslab+0xd6/0x130 [ 1499.970383] kmem_cache_alloc+0x28e/0x3c0 [ 1499.975870] getname_flags+0xc8/0x550 [ 1499.980724] do_sys_open+0x1ce/0x410 [ 1499.985963] ? filp_open+0x60/0x60 [ 1499.990036] ? __do_page_fault+0x159/0xad0 [ 1499.995977] ? do_syscall_64+0x4c/0x640 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x40) 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x40) [ 1500.000317] ? do_sys_open+0x410/0x410 [ 1500.004776] do_syscall_64+0x1d5/0x640 [ 1500.008724] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1500.013960] RIP: 0033:0x417d11 [ 1500.017463] RSP: 002b:00007f91fc48b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1500.026868] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1500.034778] RDX: 0000000000000000 RSI: 0000000000216200 RDI: 00007f91fc48b840 [ 1500.044576] RBP: 00007f91fc48bca0 R08: 000000000000000f R09: 0000000000000000 [ 1500.052718] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 1500.061059] R13: 00007ffe3cdac6bf R14: 00007f91fc48c9c0 R15: 000000000119bf8c [ 1500.097777] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #4 [ 1500.691727] FAULT_INJECTION: forcing a failure. [ 1500.691727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1500.709996] CPU: 1 PID: 6672 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1500.720731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.731285] Call Trace: [ 1500.734805] dump_stack+0x1b2/0x281 [ 1500.739083] should_fail.cold+0x10a/0x149 [ 1500.743833] __alloc_pages_nodemask+0x22c/0x2720 [ 1500.749075] ? __lock_acquire+0x5fc/0x3f20 [ 1500.753536] ? trace_hardirqs_on+0x10/0x10 [ 1500.758598] ? trace_hardirqs_on+0x10/0x10 [ 1500.764296] ? deref_stack_reg+0x124/0x1a0 [ 1500.769630] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1500.776244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1500.781365] ? trace_hardirqs_on+0x10/0x10 [ 1500.785911] ? unwind_next_frame+0xe54/0x17d0 03:00:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x400}) 03:00:26 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x40) 03:00:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) [ 1500.791297] ? lock_acquire+0x170/0x3f0 [ 1500.797110] ? mem_cgroup_id_get_online+0xb0/0xb0 [ 1500.802670] ? check_preemption_disabled+0x35/0x240 [ 1500.808257] ? __unlock_page_memcg+0x4f/0x100 [ 1500.813633] alloc_pages_current+0x155/0x260 [ 1500.820557] __get_free_pages+0xb/0x40 [ 1500.825885] __tlb_remove_page_size+0x272/0x440 [ 1500.834285] unmap_page_range+0xf92/0x1ce0 [ 1500.839071] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1500.846683] ? vm_normal_page_pmd+0x340/0x340 [ 1500.853004] unmap_single_vma+0x147/0x2b0 [ 1500.859682] unmap_vmas+0x9d/0x160 [ 1500.864597] exit_mmap+0x270/0x4d0 [ 1500.870780] ? SyS_remap_file_pages+0x6a0/0x6a0 [ 1500.880510] ? kmem_cache_free+0x23a/0x2b0 [ 1500.889480] ? __khugepaged_exit+0x29b/0x3c0 [ 1500.897437] mmput+0xfa/0x420 [ 1500.901875] do_exit+0x984/0x2850 [ 1500.906450] ? mm_update_next_owner+0x5b0/0x5b0 [ 1500.914539] ? get_signal+0x323/0x1ca0 [ 1500.920662] ? lock_acquire+0x170/0x3f0 [ 1500.925927] ? lock_downgrade+0x740/0x740 [ 1500.930340] do_group_exit+0x100/0x2e0 [ 1500.937294] get_signal+0x38d/0x1ca0 [ 1500.946147] do_signal+0x7c/0x1550 [ 1500.953148] ? __vfs_read+0xec/0x620 [ 1500.961668] ? drm_open+0x1010/0x1010 [ 1500.968488] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1500.977860] ? vfs_copy_file_range+0x9b0/0x9b0 [ 1500.987311] ? setup_sigcontext+0x820/0x820 [ 1500.994045] ? common_file_perm+0x3ee/0x580 [ 1501.002829] ? check_preemption_disabled+0x35/0x240 [ 1501.009841] ? kick_process+0xe4/0x170 [ 1501.015712] ? task_work_add+0x87/0xe0 [ 1501.021141] ? fput+0xaa/0x140 [ 1501.024810] ? exit_to_usermode_loop+0x41/0x200 [ 1501.030791] exit_to_usermode_loop+0x160/0x200 [ 1501.036439] do_syscall_64+0x4a3/0x640 [ 1501.041662] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1501.047253] RIP: 0033:0x45e219 [ 1501.050806] RSP: 002b:00007f8681814c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1501.059798] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 000000000045e219 [ 1501.077499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 03:00:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80001, 0x0) read$FUSE(r0, 0x0, 0x0) 03:00:26 executing program 2 (fault-call:0 fault-nth:1): syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_destroy_extent_tree\x00', r1}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:26 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:26 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) [ 1501.090822] RBP: 00007f8681814ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1501.105970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1501.126949] R13: 00007ffd7192e27f R14: 00007f86818159c0 R15: 000000000119bf8c 03:00:26 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8992, &(0x7f0000000000)={'macvlan1\x00', @ifru_names}) 03:00:26 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x101000) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0xffff) read$FUSE(r0, 0x0, 0x0) [ 1501.229423] FAULT_INJECTION: forcing a failure. [ 1501.229423] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.277937] CPU: 0 PID: 6712 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1501.288566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.318995] Call Trace: [ 1501.322855] dump_stack+0x1b2/0x281 [ 1501.326859] should_fail.cold+0x10a/0x149 [ 1501.331446] should_failslab+0xd6/0x130 [ 1501.336233] kmem_cache_alloc+0x28e/0x3c0 [ 1501.341825] get_empty_filp+0x86/0x3e0 [ 1501.345967] path_openat+0x84/0x2970 [ 1501.350447] ? get_pid_task+0x91/0x130 [ 1501.355830] ? path_lookupat+0x780/0x780 [ 1501.363704] ? trace_hardirqs_on+0x10/0x10 [ 1501.372798] do_filp_open+0x179/0x3c0 [ 1501.380085] ? may_open_dev+0xe0/0xe0 [ 1501.387040] ? __alloc_fd+0x1be/0x490 [ 1501.393582] ? lock_downgrade+0x740/0x740 [ 1501.401270] ? do_raw_spin_unlock+0x164/0x220 [ 1501.406177] ? _raw_spin_unlock+0x29/0x40 [ 1501.411126] ? __alloc_fd+0x1be/0x490 [ 1501.415925] do_sys_open+0x296/0x410 [ 1501.419797] ? filp_open+0x60/0x60 [ 1501.424125] ? __do_page_fault+0x159/0xad0 [ 1501.432330] ? do_syscall_64+0x4c/0x640 [ 1501.440270] ? do_sys_open+0x410/0x410 [ 1501.449849] do_syscall_64+0x1d5/0x640 [ 1501.456029] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1501.464938] RIP: 0033:0x417d11 [ 1501.468791] RSP: 002b:00007f91fc48b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1501.479475] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1501.490849] RDX: 0000000000000000 RSI: 0000000000216200 RDI: 00007f91fc48b840 [ 1501.505343] RBP: 00007f91fc48bca0 R08: 000000000000000f R09: 0000000000000000 [ 1501.514233] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 1501.527875] R13: 00007ffe3cdac6bf R14: 00007f91fc48c9c0 R15: 000000000119bf8c 03:00:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002180)={0x50, 0x0, r3, {0x7, 0x20, 0x9, 0x800000, 0x8, 0xee9e, 0xffffffff, 0x4}}, 0x50) 03:00:27 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:27 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:27 executing program 2 (fault-call:0 fault-nth:2): syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8992, &(0x7f0000000000)={'macvlan1\x00', @ifru_names}) 03:00:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1bf882) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:27 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) [ 1501.646684] FAULT_INJECTION: forcing a failure. [ 1501.646684] name failslab, interval 1, probability 0, space 0, times 0 03:00:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) [ 1501.702896] CPU: 1 PID: 6726 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1501.713830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.726477] Call Trace: [ 1501.729377] dump_stack+0x1b2/0x281 [ 1501.733871] should_fail.cold+0x10a/0x149 [ 1501.739708] should_failslab+0xd6/0x130 [ 1501.747725] kmem_cache_alloc+0x28e/0x3c0 03:00:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) [ 1501.753492] get_empty_filp+0x86/0x3e0 [ 1501.757902] path_openat+0x84/0x2970 [ 1501.762413] ? get_pid_task+0x91/0x130 [ 1501.767184] ? path_lookupat+0x780/0x780 [ 1501.772403] ? trace_hardirqs_on+0x10/0x10 [ 1501.777058] do_filp_open+0x179/0x3c0 [ 1501.782364] ? may_open_dev+0xe0/0xe0 [ 1501.787337] ? __alloc_fd+0x1be/0x490 [ 1501.792549] ? lock_downgrade+0x740/0x740 [ 1501.798640] ? do_raw_spin_unlock+0x164/0x220 [ 1501.804452] ? _raw_spin_unlock+0x29/0x40 [ 1501.809428] ? __alloc_fd+0x1be/0x490 [ 1501.814552] do_sys_open+0x296/0x410 [ 1501.818857] ? filp_open+0x60/0x60 [ 1501.822746] ? __do_page_fault+0x159/0xad0 [ 1501.828810] ? do_syscall_64+0x4c/0x640 [ 1501.836142] ? do_sys_open+0x410/0x410 [ 1501.841511] do_syscall_64+0x1d5/0x640 [ 1501.846422] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1501.853932] RIP: 0033:0x417d11 [ 1501.859014] RSP: 002b:00007f91fc48b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1501.869218] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1501.878304] RDX: 0000000000000000 RSI: 0000000000216200 RDI: 00007f91fc48b840 [ 1501.890596] RBP: 00007f91fc48bca0 R08: 000000000000000f R09: 0000000000000000 [ 1501.900373] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000002 [ 1501.908672] R13: 00007ffe3cdac6bf R14: 00007f91fc48c9c0 R15: 000000000119bf8c 03:00:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xaa17, 0x1a080) read$FUSE(r0, 0x0, 0x0) 03:00:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xea89c58c8fbefc12}, 0x4000080) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:27 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:27 executing program 4: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x6, 0x4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x8, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = accept4$netrom(r0, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @default, @bcast, @remote, @null, @netrom, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x100000) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000001c0)=0x72, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) 03:00:27 executing program 2 (fault-call:0 fault-nth:3): syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:27 executing program 3: read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1502.544460] FAULT_INJECTION: forcing a failure. [ 1502.544460] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.576478] CPU: 0 PID: 6756 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1502.585757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.596647] Call Trace: [ 1502.599947] dump_stack+0x1b2/0x281 [ 1502.605560] should_fail.cold+0x10a/0x149 [ 1502.611775] should_failslab+0xd6/0x130 [ 1502.615987] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1502.621818] apparmor_file_alloc_security+0x129/0x800 [ 1502.631917] security_file_alloc+0x66/0xa0 [ 1502.641742] ? selinux_is_enabled+0x5/0x50 [ 1502.649747] get_empty_filp+0x15c/0x3e0 [ 1502.660007] path_openat+0x84/0x2970 [ 1502.674320] ? get_pid_task+0x91/0x130 [ 1502.686093] ? path_lookupat+0x780/0x780 [ 1502.698083] ? trace_hardirqs_on+0x10/0x10 [ 1502.710831] do_filp_open+0x179/0x3c0 [ 1502.723570] ? may_open_dev+0xe0/0xe0 [ 1502.733589] ? __alloc_fd+0x1be/0x490 [ 1502.744250] ? lock_downgrade+0x740/0x740 [ 1502.753293] ? do_raw_spin_unlock+0x164/0x220 [ 1502.761844] ? _raw_spin_unlock+0x29/0x40 [ 1502.769364] ? __alloc_fd+0x1be/0x490 [ 1502.776237] do_sys_open+0x296/0x410 [ 1502.780210] ? filp_open+0x60/0x60 [ 1502.784645] ? __do_page_fault+0x159/0xad0 [ 1502.789602] ? do_syscall_64+0x4c/0x640 03:00:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x805, 0x30a42) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x2, 0x9d5964f6922cf9a7, 0x1}) read$FUSE(r0, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) 03:00:28 executing program 4: write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000f5ffffff", @ANYRES64=0x0, @ANYBLOB="0000d8e431ecf491887240958f14328322d251f3000100260a20b4b30361db4c5a198ee66d76e5bf9ca10c71753f32f5e9a8f26b253e6b7e955e885581889996df53dd05999c2ab757b37a5409d7eb77a45abcbe89c7421d046fd3035276da8f9ef9cf0259234a11544c295f18ddae377506fa00af659886"], 0x30) r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc6b4, 0x20000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000040)={0x5, 0x3, "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"}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8918, &(0x7f0000000180)={'veth1_to_team\x00', @ifru_names}) 03:00:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x19b001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)=0x3) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000080)={{{0x2}}, 0x6f, 0x0, &(0x7f0000000000)="28c6149e025ad4fec441876b2999dc3a8646843dc04e6d894f8229ce3b660ae7716846de2f1e188a2e8ed585a8ec5e75652a34a02c8be3a071a30fe25393fe6cb314ec6cd68180a5ef4c52fa9ae32457833238fa02c5b47516058de0c8163785c59d3239dfb31f1fb57d280c2c394a"}) 03:00:28 executing program 1: ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:28 executing program 1: ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x7d, 0xaa003) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) [ 1502.795439] ? do_sys_open+0x410/0x410 [ 1502.800107] do_syscall_64+0x1d5/0x640 [ 1502.804564] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1502.810312] RIP: 0033:0x417d11 [ 1502.813859] RSP: 002b:00007f91fc48b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1502.822870] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1502.832872] RDX: 0000000000000000 RSI: 0000000000216200 RDI: 00007f91fc48b840 [ 1502.842562] RBP: 00007f91fc48bca0 R08: 000000000000000f R09: 0000000000000000 [ 1502.853753] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 1502.863502] R13: 00007ffe3cdac6bf R14: 00007f91fc48c9c0 R15: 000000000119bf8c 03:00:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:28 executing program 1: ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x4000) ioctl$USBDEVFS_RESET(r1, 0x5514) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x28400, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0xfd60, 0x4) 03:00:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8040) read$FUSE(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x193d80, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002180)={'ip6tnl0\x00', &(0x7f0000002100)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x8, 0x4a, @dev={0xfe, 0x80, [], 0x17}, @rand_addr=' \x01\x00', 0x7, 0x80, 0x1660, 0xfffffffa}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f00000020c0)={0x18, 0xfffffffffffffffe, r3, {0x3}}, 0x18) 03:00:28 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf, 0xfffff7f1}) 03:00:28 executing program 2 (fault-call:0 fault-nth:4): syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:28 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:28 executing program 4: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x42900) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xa, 0x82641) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000240)={{}, 0xfb, 0x7ff, &(0x7f0000000140)="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"}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x153080, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) ioctl$sock_ifreq(r3, 0x8932, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_data=&(0x7f0000000080)="4eaa11bc3850bbc5fc24060ed25a800a9296e43189d00505854c09646aae14a0"}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg\x00', 0x145040, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x200001, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x48891) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x28, 0x6, 0x42, @local, @private0={0xfc, 0x0, [], 0x1}, 0x20, 0x10, 0x2, 0x5}}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0) 03:00:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:28 executing program 2: syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xfffefffe00000001, 0x6c6200) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f01f10127360f01ca0f01c80f38caa600000f21a02e0f799700206766c7442400000000006766c7442402000000006766c744240600000000670f011c240f08baf80c66b81094a28466efbafc0cb89291ef", 0x52}], 0x1, 0x66, &(0x7f0000000140)=[@dstype3={0x7, 0x1}, @flags={0x3, 0x10040}], 0x2) 03:00:28 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003600)='/dev/bsg\x00', 0x200400, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:29 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xff, 0x29a101) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 03:00:29 executing program 4: mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x80010, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0xb, 0x1}}, 0x36, 0xd23, &(0x7f0000000000)="9fb5a377ee1d7d11f08b4df4c1bc310291eb465f2fa6f64b1b809bf095a2efa92fac39cb3799e4ecea0eb96edfecfa6b4da658bd5765"}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000180)={0x2000008, &(0x7f0000000080)="93020eec1101816a126a0f3718aefd04e2f3507d5aef4dac27448682998349ce1f8b1850203175abb8c3333574a9b8e91751f80de136e4796e8aeb3ed254b43d621aa1b992cb4771fd076122462117f0ad4dfbbd2eba284f7da2e35971230aa6754fc5afdfe2ccc600b3512d5a878d63b3c5a8aec9a17c7de2dd737f740912ae8ceb36f93c41f82e4b3feb2b3626967b8c58e23637b53bcdf1c6171d940a83e0c0efaa4ce20e238dc8bbf0fd8fb2499f4b85c5fdbc251af42b31b0277dd857f43ad5023be47849dd47708e40d0d38f795c1c35852f0b8e2eed9e5829fde4d1bd44d39bcee24b9c827399"}) 03:00:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 03:00:29 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x503601) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) read$FUSE(r0, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x4, 0x8, 0x0) 03:00:29 executing program 2: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000300)={{}, [@netrom, @rose, @bcast, @bcast, @netrom, @remote, @default, @null]}, &(0x7f0000000380)=0x48, 0x800) accept4$netrom(r0, &(0x7f00000003c0)={{0x3, @default}, [@netrom, @rose, @null, @default, @null, @netrom, @rose, @null]}, &(0x7f0000000440)=0x48, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x33, 0x4, 0x2, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x48, 0x1, 0x4, 0x9}}) 03:00:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000080)={0x98dc, 0x1c, [{0x6, 0x1}, {0x6, 0x1}, {0xc, 0x1}, {0x8, 0x1}, {0x1, 0x1}, {0xf, 0x1}, {0x9, 0x1}, {0xb}, {0xe}, {0xb}, {0x9, 0x1}, {0xf, 0x1}, {0xf, 0x1}, {0xe}, {0x6}, {0x8, 0x1}, {}, {0xb}, {0x9}, {0x5, 0x1}, {0x7}, {0xd, 0x1}, {0xa, 0x1}, {0xe}, {0xe}, {0x8}, {0x6}, {0x7}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2000) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0xf}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xbf, 0xfffff7f1}) 03:00:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000000)={0x80000000, "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"}) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x50740, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5f4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x20000804) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000140)=0x9) [ 1504.426640] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #9 [ 1504.443511] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #9 03:00:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x101, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x513e, 0x1a, [{0x2, 0x1}, {0x5}, {0xe}, {0x2, 0x1}, {0x3, 0x1}, {0xf, 0x1}, {0x9}, {0x4, 0x1}, {0xb}, {0x6, 0x1}, {0x3}, {0xe}, {0xc}, {0xc, 0x1}, {0xd}, {0xd}, {0x5}, {0x0, 0x1}, {0xd, 0x1}, {0x8}, {0x5}, {0x2, 0x1}, {0xf}, {0xf, 0x1}, {0xd}, {0x3, 0x1}]}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xbf, 0xfffff7f1}) 03:00:30 executing program 2: r0 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = geteuid() r5 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000048c0)=ANY=[@ANYBLOB="4003000000000000", @ANYRES64=0x0, @ANYBLOB="0500000000000000010000000000000040000000000000000100000000000000ff010000000000000300000000000000080000000000000008000000000000000800000000000000ff070000000000003a1e00000000000001000000600f0000050000000000000040000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="20000000a100000000000000010000000000000000100000000000000f000000010000002f6465762f6472692f6361726423000005000000000000000200000000000000010001000000000003000000000000000600000005000000050000000000000000000080000000002d0000000000000006000000000000008d090000000000000400000000000000ffffffff00000000040000000060000072950000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="090000000100000000000000030000000000000006000000000000000f000000200000002f6465762f6472692f63617264230000030000e700000000020000000000000038f00000000000001400000000000000c0bac937ff00000005000000000000001f000000000000000700000000000000040000000000000001000080000000000900000000000000ffffffff070000000600000000400000030000007a1f0b10298e782a1fb65db51c1bcdfcb07f7f344afa785c0c04a1f825fc1c97ab6f6b9f488b60cbd8", @ANYRES32=0xee00, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="000000005ae6000000000000050000000000000001000080000000000300000020000000242a4000000000000200000000000000010000000000000020000000000000000010000000000000545c00007f0000000400000000000000000000000100000009000000000000000700000000000000000000000000000004000000000000000002000007000000000000800020000009000000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="01000080010000000000000000000000000000000300000000000000010000003f0000002900000000000000"], 0x340) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x109b80) read$FUSE(0xffffffffffffffff, &(0x7f0000004d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004100)={0x78, 0x0, r6, {0xffffffffffffe191, 0x5, 0x0, {0x4, 0xff, 0xa3d000000, 0x0, 0x4, 0x4, 0x3ff, 0x21, 0x5, 0xa000, 0xeea, r1, r5, 0x400, 0x52445d09}}}, 0x78) 03:00:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xff41) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000002140)=0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0x0, r2, {0x3}}, 0x18) r3 = getpid() getpgid(r3) write$FUSE_LK(r1, &(0x7f0000002100)={0x28, 0xffffffffffffffda, r2, {{0x565, 0x9, 0x1, r3}}}, 0x28) 03:00:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xbf, 0xfffff7f1}) 03:00:30 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r0, &(0x7f0000001480)={{0x3, @netrom}, [@null, @null, @default, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000080)=0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0)=0x2, 0x4) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000000)) 03:00:30 executing program 4: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x41, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x400c050) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x41) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:30 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x60, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000404) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) 03:00:30 executing program 4: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x34001, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0xfa, 0x81, 0x9, 0x26, @mcast2, @ipv4={[], [], @multicast1}, 0x10, 0x80, 0x0, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x0, 0x8000, 0x8, 0xfffffffd, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@generic={0x94, 0xd, "ed364368f0833bf9333975"}, @generic={0x89, 0x7, "c1f9c59198"}, @generic={0x83, 0xb, "8d7571cc682d54fb4d"}, @timestamp_addr={0x44, 0x34, 0x4a, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x44}, 0xf2}, {@remote, 0x23}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x8}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @end]}}}}}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40c443, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x440, 0x0) 03:00:31 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0x0, 0xfffff7f1}) 03:00:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x496240) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x0, {0xffffffff}}, 0x18) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2e1c2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x3, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) 03:00:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x7468, 0x13, [{0xf}, {0xf}, {0xa}, {0x4}, {0x4}, {0xf}, {0xa}, {0x2, 0x1}, {0x8}, {0x6, 0x1}, {0x8, 0x1}, {0xc}, {0x4, 0x1}, {0xf}, {0x7}, {0x2}, {0x8}, {0xf}, {0x9}]}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x14, 0x800, 0x70bd27, 0x25dfdbfd, {0x1d, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "492e8a8667fa21f6b4e515ea4544a770ae1b507c5b6944f86bcaa6ff9102cd12191f1c41eaf0f3760b09c56f962a87b2beb781020f70180319dc740505ce763dc18bb5f2658abd224636d5bfd4b5899b992901ff49ed55b3c45e7a1a6eabd34d0eb180e01781b9da04127da5c08b75ea36d75c1493c691eaeb333f6c54f006cefb68eff0e2222ef83c326061fc58d76d10420557c3a364b4e6329a135cb818a47e09fcf22b"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x7}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) read$FUSE(r0, 0x0, 0x0) 03:00:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:31 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000012c0)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x4, 0x3, 0x8, @private2={0xfc, 0x2, [], 0x1}, @mcast1, 0x10, 0x700, 0x68000000, 0xffff8001}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000001380)={'ip6tnl0\x00', &(0x7f0000001300)={'ip6tnl0\x00', r2, 0x6, 0x3f, 0xf9, 0x9, 0x59, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7, 0x1f, 0x40}}) 03:00:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0x0, 0xfffff7f1}) 03:00:31 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfbf6, 0x5b1c80) 03:00:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:31 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:31 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x4200) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 03:00:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0x0, 0xfffff7f1}) [ 1506.251820] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #0 [ 1506.290354] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #0 03:00:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:31 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:32 executing program 4: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 03:00:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf}) 03:00:32 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000ea8db73d1feea92a256e1ce805812dc65ffb44ab15795b6e1aba8e468b5cad536760fddc212ac2c24842f3779c33dda4c76aad71554bee42e9483b8190079ccddbc4f2966e13d8c18f446d295a622c99bffd00"/96, @ANYRES16=r0, @ANYBLOB="00042abd7000fedbdf250700000008000c0000000000060001000500000006001c002d030000050005000100000008000900000000000c0016000000000000000000050005000000000006001c0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008081}, 0x400c0c1) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x30, 0x4) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x18000) 03:00:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x40000) read$FUSE(r0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="41c197ea9c0cb3e48d3cf016b6", @ANYRES16=r1, @ANYBLOB="100027bd7000fcdbdf250200000008000300992a00000800030068820000050006008100000008000300020000000500060005000000"], 0x3c}}, 0x20040040) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002dbd7000ffdbdf2504000000080003007f00000008000200000000000500050002000000080003000100000008000200000016718000000500050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x4001) 03:00:32 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:32 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="6692e52512c6f37d190b7dee4d6faee5d4afc328b4e0fd03e0483b580fd73b6f77e652d9db94ad1410e47afe2741d7503218f672ebf0796114f1e486ca64f1", 0x3f) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x3dd, 0x0, 0x1}}}, 0x28) 03:00:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 03:00:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf}) 03:00:32 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x109000, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='H@\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf250300000000001f00fe8000000000000000000000000000201400080076657468305f6d61637674617000000008000b00020000000a00080076657468315f766972745f7769666900"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x18001) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x5, 0x1}}, 0xce, 0x9, &(0x7f0000000080)="3aad6483fc0392d30f7a74ef490022caee81ce5530d168a51a54966906bd0d34fb29b6b96841763838fb9e625c5f1f519c9df9e01ff94849ae49a51104a8bd048ad1450ec1dee448ad572f210196ac0622832779aecc05f9f78f9ba1814772b5fd0c03f6d93577cab55407c3dbd14e2a23ac034b9b2e7795cd03b41ee2e65d60916c50c98ce9f3d68860e61e8fff1bc94834ee31ac15cfe73e8d46226247e43cd867c80057e37a791d3daa4f6525a8fbec94fa8d016135594ae696af0fa191e815fdf63a4ebd801bd514fe9d3318"}) 03:00:32 executing program 4: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x1, @null, @rose={'rose', 0x0}, 0xffff8001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x460fbb46, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000005040)={&(0x7f0000003d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000003dc0)=""/85, 0x55}, {&(0x7f0000003e40)=""/169, 0xa9}, {&(0x7f0000003f00)=""/1, 0x1}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x4, &(0x7f0000004f80)=""/191, 0xbf}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000050c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)=ANY=[@ANYBLOB="33fb42ef", @ANYRES16=r2, @ANYBLOB="000c29bd7000fcdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0c004300ffff000005000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x11) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0xbf, &(0x7f00000000c0)=0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, 0x0) 03:00:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6dd, 0xbf}) 03:00:32 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 03:00:32 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xbf, 0x800, 0x800, 0x2, 0x7, 0x84, "fba116a1c2c533a4b4d618666460e2f164993aa750a006c0a96155e7645e6d1b71a1f17debe4b6dbb0ee6ebcbc6d039a32702130d9640e1fb4e368e06d2e06c6316664e55d32d00cc683ffa1d8a39082b905a9cf69887bb9b2cac50829f9ad57c68df4c1cd15fc98d780a65085e346cb7911c6482e9fadaa687623d9a9b0e86fa620d4568e95d65d91324bdd8e508fafae3e6d8566b61c44dcdae277c9016d4adabdbcf86aa9a078d7768b741fcf7bbcd5f99d9042c9ffd8d029c3c8e8237b"}}, 0x1d7) 03:00:33 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/bsg\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) read$FUSE(r2, 0x0, 0x0) 03:00:33 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x1, @null, @rose={'rose', 0x0}, 0xffff8001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x460fbb46, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000005040)={&(0x7f0000003d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000003dc0)=""/85, 0x55}, {&(0x7f0000003e40)=""/169, 0xa9}, {&(0x7f0000003f00)=""/1, 0x1}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x4, &(0x7f0000004f80)=""/191, 0xbf}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000050c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)=ANY=[@ANYBLOB="33fb42ef", @ANYRES16=r2, @ANYBLOB="000c29bd7000fcdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0c004300ffff000005000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x11) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0xbf, &(0x7f00000000c0)=0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, 0x0) 03:00:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 03:00:33 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:33 executing program 2: getsockname$netrom(0xffffffffffffffff, &(0x7f0000000240)={{}, [@rose, @netrom, @bcast, @rose, @default, @netrom, @null, @default]}, &(0x7f00000002c0)=0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x4}, 0x6, 0xa1, &(0x7f0000000080)="022e0beabde13aa45fe8b5e09ea3cb8b757dfa391b0a09ee0075f9ae1a979bfaab6f692b1f2a4031311b87453df2ebcf7d56776509064645ca7c020d424778cea9b2394f54db4c6c1e637ba40f61857add06f271ae03cf75ea0209cd2ce6b5164b85e4c1a9f03dc9397ea699a35c6be9b013fdb05cb7399b3f40db8bebfb1bd27db3ac94a5eeb9fc7da0e2f9836f6fc35b17ce3da9f3776ae8a30615ea85f212582de9bf4730d0237113911171e47e7706aa", 0xb2, 0xffff, 0x4, 0x9ea, 0x8, 0x7fff, &(0x7f0000000140)="00df7971f242e3014e6ca6922ce686b9ce70e6d9e52b0ae785d07876e28c5e69b3f0841614fb1e2d49024b3bcb4c7f38b407f13e0e3030cf9748e91fcc87157ecd4b8104c43866beba5633b39e006f6432b43924d06d185ac47ef1dddd22ebb8041a4344f2707cc037fa9aa08f63a197df73fc2f2839a2ff1af9c1c3cd16645e2c3c3ff987638e2dff7bdaa5c1ced1097e87865afa55928e718c18aa90f11a5acb229e4a250ad22f2dd2b84de944622b931168e515bb25540ce0315977cfb1f7836c21695112f1532feec112d3e87e8e773f7faeabd7f93e9b4f08eb731c56fed9dc2c8a97eac153dd76bc607bf95f382ad0"}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x3, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000340)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) 03:00:33 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000040)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x7, 0x0, {0x5, 0x6, 0xf697, 0x8, 0x9, 0x80, 0x4, 0xfffffffa, 0x3, 0xa000, 0x0, 0xee00, 0x0, 0x2, 0x6}}}, 0x78) r1 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002480)='/dev/bsg\x00', 0xc00, 0x0) r3 = geteuid() read$FUSE(r0, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000004500)={0x468, 0x0, 0x0, [{{0x5, 0x0, 0x3, 0x9, 0x3, 0x0, {0x0, 0x28800000000, 0x8001, 0x2, 0x43d, 0xffffffffd4b3847b, 0x4, 0x1, 0xffffff48, 0x5000, 0xffffffc0, 0xee01, 0x0, 0xd046, 0x3497}}, {0x6, 0x2, 0x15, 0x1, '/dev/bus/usb/00#/00#\x00'}}, {{0x5, 0x3, 0x100000001, 0x3, 0x87ba, 0x7, {0x4, 0x984, 0x7f, 0x497ea445, 0x10000, 0x1, 0xe444, 0x9, 0x101, 0x6000, 0x7, r3, 0xee00, 0x8, 0x3f}}, {0x1, 0x1, 0x0, 0xfffffffe}}, {{0x4, 0x1, 0x7fff, 0x8, 0x100, 0xfffffff7, {0x5, 0x200, 0x7f, 0x4, 0x6, 0x3, 0x2, 0x5, 0x80000000, 0x6000, 0x100, r4, 0xee00, 0xfffffff8, 0xccff}}, {0x1, 0xff, 0x2, 0x8, '!#'}}, {{0x2, 0x1, 0x6, 0x5, 0x8, 0x3, {0x0, 0x7fff, 0x9, 0xd629, 0x2, 0xe7, 0x242, 0x401, 0x4, 0xc000, 0x36b5, 0xee00, 0x0, 0x8, 0x1}}, {0x0, 0x1ff, 0x0, 0x5}}, {{0x3, 0x1, 0x7, 0x1, 0x8, 0x4, {0x2, 0x8, 0x10001, 0xba, 0x7, 0xff, 0x400, 0xfffffffb, 0x40, 0x2000, 0xfe, 0xee00, 0x0, 0x3ff, 0xffffffff}}, {0x3, 0x5, 0x6, 0x7, '\'@@!)\\'}}, {{0x4, 0x1, 0x4, 0x8, 0x10000, 0x1, {0x4, 0x1, 0x4, 0x0, 0x3f, 0x100, 0x10000, 0x56, 0x9, 0x4000, 0x1, 0xee00, 0xee00, 0x10000, 0x1ff8000}}, {0x6, 0xd1dc, 0x6, 0x4, '}[@\'}['}}, {{0x1, 0x0, 0x6, 0x1ff, 0x0, 0x800, {0x6, 0x4, 0x102000000, 0x400, 0x7, 0x0, 0x5, 0x60d9d337, 0x401, 0xc000, 0xff, 0x0, r5, 0x1, 0x7}}, {0x0, 0x195, 0x0, 0xf6}}]}, 0x468) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60, 0x0, 0x0, {{0x2, 0xfffffffffffff800, 0x3f, 0x0, 0x2, 0x4, 0x8, 0x6}}}, 0x60) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f0000004980)=0x200, &(0x7f00000049c0)=0x4) write$FUSE_DIRENT(r0, &(0x7f0000002300)={0x98, 0x0, r6, [{0x0, 0x440, 0x6, 0x9, '\'@@!)\\'}, {0x6, 0x6, 0x0, 0x100}, {0x0, 0x1, 0x15, 0x7, '/dev/bus/usb/00#/00#\x00'}, {0x6, 0x4, 0x3, 0x6, '+(&'}]}, 0x98) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000240)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r8, &(0x7f0000002400)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x20, 0x9, 0xc41000, 0x0, 0x1, 0x2cb, 0x7}}, 0x50) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000200)={{{0x1, 0x1}}, 0xa0, 0x7fffffff, &(0x7f0000000140)="7e45553128e3ebb8861b7601356c0434f9cb3f22b74b9e212e6fec46b2fb2e81f0b66bb2557473779ff00e8adb84893b273a83503e05b5581fcc3ce1232f5d522bdd34f436f6498ce6907ccf06208147f953e9f5c4948ec57f2b7aef65464cd4462dabd9bc146464bd81703260d3e8f485fca30de88c86808d92f5ec2e2fe31db1582a89fdaf570223455e7d1ebd1649657e9965e0d8c4a20362488948a7a406"}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, 0x0) 03:00:33 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) 03:00:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 03:00:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 03:00:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 03:00:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x103d5f806971dbeb, 0x9, 0x3, 0xacf, 0x294, 0x1, 0x4, [], 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="8e4dc674e7a547ab9821413143141e44af3821a5f19ddfc83936dd077fab73c5cd044ea1f5e2b3025c1c6af75e15c668c7cd44a03a9ed5e45b663980096319a339fcdce9a5c4a27082f79f9fb42f4dab895fae8ee926c6c135df97082444f5f5", &(0x7f0000000100)=@udp6, 0x4}, 0x20) [ 1508.002115] usb usb1: usbfs: process 6968 (syz-executor.4) did not claim interface 0 before use 03:00:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)) 03:00:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 03:00:33 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x0) 03:00:33 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffe00000001, 0x216200) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x810, r1, 0x47cba000) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)={0xeb3, &(0x7f0000000080)="caa588a8fc18cb2d912fa44aa214d56fdc919328180cc7e031fe78659b1b4e5e84f547cbba6c5fb53d6c82d476953f58faef93de2218918f0212d3ab8ca5e22683bb1d2d9f181579525ca8686370b7a1f8d92c040ba2f175e03e657f0521162717c30c6a34ab6505cbf64e375b594d6c1e1d3653a3a1af3af51da8a45c4d09ddad2add2eb76f373b5cd8ecc98f0f643bb0e04db5bef21ac0a4c4e65b74e8e18c315ffbb0b361798ba39eb71d99a4f2bc41f72f067008f2ac4e99f17b10d77f1c63679f7d4867dd800bbb66899b10e8b22508"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 03:00:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)) 03:00:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x1ab001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) [ 1508.766719] usb usb1: usbfs: process 6997 (syz-executor.4) did not claim interface 0 before use [ 1718.217513] INFO: task syz-executor.4:6997 blocked for more than 140 seconds. [ 1718.225116] Not tainted 4.14.217-syzkaller #0 [ 1718.232074] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1718.240408] syz-executor.4 D28880 6997 8027 0x00000004 [ 1718.246072] Call Trace: [ 1718.249986] __schedule+0x88b/0x1de0 [ 1718.254578] ? schedule_timeout+0x4a5/0xe90 [ 1718.259019] ? io_schedule_timeout+0x140/0x140 [ 1718.263651] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1718.268922] schedule+0x8d/0x1b0 [ 1718.272307] schedule_timeout+0x4af/0xe90 [ 1718.276603] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1718.282237] ? usleep_range+0x130/0x130 [ 1718.286253] ? run_timer_softirq+0x5a0/0x5a0 [ 1718.290994] ? _raw_spin_unlock_irq+0x24/0x80 [ 1718.295631] wait_for_common+0x272/0x430 [ 1718.299862] ? out_of_line_wait_on_atomic_t+0x1a0/0x1a0 [ 1718.305805] ? wake_up_q+0xd0/0xd0 [ 1718.309907] usb_start_wait_urb+0x125/0x440 [ 1718.314358] ? usb_api_blocking_completion+0xa0/0xa0 [ 1718.319585] ? __kmalloc+0x3a4/0x400 [ 1718.323332] ? usb_alloc_urb+0x1f/0x130 [ 1718.327490] ? memset+0x20/0x40 [ 1718.330887] usb_bulk_msg+0x1f6/0x500 [ 1718.334695] proc_bulk+0x331/0x6d0 [ 1718.338311] ? proc_control+0x670/0x670 [ 1718.342291] ? drop_futex_key_refs+0x2e/0xa0 [ 1718.346707] ? futex_wake+0x116/0x3c0 [ 1718.350793] usbdev_do_ioctl+0x5b0/0x2b70 [ 1718.355221] ? proc_bulk+0x6d0/0x6d0 [ 1718.362180] ? __lock_acquire+0x5fc/0x3f20 [ 1718.366458] ? trace_hardirqs_on+0x10/0x10 [ 1718.370811] ? __lock_acquire+0x5fc/0x3f20 [ 1718.375159] ? trace_hardirqs_on+0x10/0x10 [ 1718.379566] ? kcov_ioctl+0x4d/0x190 [ 1718.384100] ? trace_hardirqs_on+0x10/0x10 [ 1718.388409] ? futex_exit_release+0x220/0x220 [ 1718.393019] ? lock_downgrade+0x740/0x740 [ 1718.397360] ? __might_fault+0x104/0x1b0 [ 1718.401429] ? usbdev_compat_ioctl+0x30/0x30 [ 1718.405831] usbdev_ioctl+0x21/0x30 [ 1718.409653] do_vfs_ioctl+0x75a/0xff0 [ 1718.413472] ? ioctl_preallocate+0x1a0/0x1a0 [ 1718.418643] ? lock_downgrade+0x740/0x740 [ 1718.423202] ? __fget+0x225/0x360 [ 1718.426670] ? do_vfs_ioctl+0xff0/0xff0 [ 1718.430876] ? security_file_ioctl+0x83/0xb0 [ 1718.435326] SyS_ioctl+0x7f/0xb0 [ 1718.438893] ? do_vfs_ioctl+0xff0/0xff0 [ 1718.442980] do_syscall_64+0x1d5/0x640 [ 1718.446889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1718.452245] RIP: 0033:0x45e219 [ 1718.455830] RSP: 002b:00007fd1972f8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.463706] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1718.471187] RDX: 0000000020000200 RSI: 00000000c0185502 RDI: 0000000000000004 [ 1718.478657] RBP: 000000000119c1b8 R08: 0000000000000000 R09: 0000000000000000 [ 1718.486047] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c184 [ 1718.494269] R13: 00007ffee897f77f R14: 00007fd1972f99c0 R15: 000000000119c184 [ 1718.501982] [ 1718.501982] Showing all locks held in the system: [ 1718.508631] 1 lock held by khungtaskd/1531: [ 1718.513518] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1718.522973] [ 1718.524598] ============================================= [ 1718.524598] [ 1718.531748] NMI backtrace for cpu 1 [ 1718.535378] CPU: 1 PID: 1531 Comm: khungtaskd Not tainted 4.14.217-syzkaller #0 [ 1718.542979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.552805] Call Trace: [ 1718.555399] dump_stack+0x1b2/0x281 [ 1718.559022] nmi_cpu_backtrace.cold+0x57/0x93 [ 1718.563683] ? irq_force_complete_move+0x350/0x350 [ 1718.568623] nmi_trigger_cpumask_backtrace+0x13a/0x180 [ 1718.573903] watchdog+0x5b9/0xb40 [ 1718.577590] ? hungtask_pm_notify+0x50/0x50 [ 1718.581900] kthread+0x30d/0x420 [ 1718.585951] ? kthread_create_on_node+0xd0/0xd0 [ 1718.590619] ret_from_fork+0x24/0x30 [ 1718.594502] Sending NMI from CPU 1 to CPUs 0: [ 1718.599616] NMI backtrace for cpu 0 [ 1718.599621] CPU: 0 PID: 4614 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1718.599625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.599628] task: ffff8880a19da5c0 task.stack: ffff8880a19e0000 [ 1718.599631] RIP: 0010:__orc_find+0x83/0xf0 [ 1718.599634] RSP: 0018:ffff8880a19e79f0 EFLAGS: 00000246 [ 1718.599640] RAX: fffffffffcdd4960 RBX: ffffffff8a62b6a0 RCX: ffffffff87400089 [ 1718.599643] RDX: 0000000000000000 RSI: ffffffff8ae0a6d4 RDI: ffffffff8a62b6a0 [ 1718.599647] RBP: ffffffff8a62b6a0 R08: ffffffff8ae0a6d4 R09: ffffffff8ae0a6e0 [ 1718.599650] R10: 0000000000145fa6 R11: 0000000000066071 R12: ffffffff8a62b6a4 [ 1718.599654] R13: ffffffff8a62b6a0 R14: ffffffff8a62b6a0 R15: dffffc0000000000 [ 1718.599658] FS: 00007f6372cf58c0(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 1718.599661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1718.599664] CR2: 00007f636f32e000 CR3: 00000000a1aba000 CR4: 00000000001406f0 [ 1718.599668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1718.599671] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1718.599674] Call Trace: [ 1718.599676] unwind_next_frame+0x59a/0x17d0 [ 1718.599679] ? do_syscall_64+0x1d5/0x640 [ 1718.599681] ? deref_stack_reg+0x1a0/0x1a0 [ 1718.599684] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1718.599687] __save_stack_trace+0x90/0x160 [ 1718.599690] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1718.599692] kasan_kmalloc+0xeb/0x160 [ 1718.599695] ? kasan_kmalloc+0xeb/0x160 [ 1718.599698] ? kmem_cache_alloc+0x111/0x3c0 [ 1718.599700] ? getname_flags+0xc8/0x550 [ 1718.599703] ? do_sys_open+0x1ce/0x410 [ 1718.599705] ? do_syscall_64+0x1d5/0x640 [ 1718.599708] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1718.599711] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1718.599714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1718.599716] ? putname+0xcd/0x110 [ 1718.599718] ? getname+0x20/0x20 [ 1718.599721] ? cache_alloc_refill+0x2fa/0x350 [ 1718.599723] ? lock_downgrade+0x740/0x740 [ 1718.599726] ? do_raw_spin_unlock+0x164/0x220 [ 1718.599729] ? _raw_spin_unlock+0x29/0x40 [ 1718.599731] ? cache_alloc_refill+0x2fa/0x350 [ 1718.599734] ? kmem_cache_alloc+0x2c8/0x3c0 [ 1718.599736] kmem_cache_alloc+0x111/0x3c0 [ 1718.599739] getname_flags+0xc8/0x550 [ 1718.599741] do_sys_open+0x1ce/0x410 [ 1718.599744] ? filp_open+0x60/0x60 [ 1718.599746] ? do_syscall_64+0x4c/0x640 [ 1718.599748] ? do_sys_open+0x410/0x410 [ 1718.599751] do_syscall_64+0x1d5/0x640 [ 1718.599754] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1718.599756] RIP: 0033:0x7f6372285840 [ 1718.599759] RSP: 002b:00007ffd10bd3438 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1718.599765] RAX: ffffffffffffffda RBX: 00007ffd10bd3740 RCX: 00007f6372285840 [ 1718.599768] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055f4d9934a00 [ 1718.599772] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 1718.599775] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1718.599779] R13: 000055f4d9927040 R14: 00007ffd10bd3700 R15: 000055f4d9934c10 [ 1718.599781] Code: 48 01 d0 48 d1 f8 48 8d 5c 85 00 48 89 d8 48 c1 e8 03 42 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 48 48 63 03 <48> 01 d8 48 39 c1 73 b0 4c 8d 63 fc 49 39 ec 73 b3 4d 29 ee 49 [ 1718.600181] Kernel panic - not syncing: hung_task: blocked tasks [ 1718.921674] CPU: 1 PID: 1531 Comm: khungtaskd Not tainted 4.14.217-syzkaller #0 [ 1718.929233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.938584] Call Trace: [ 1718.941176] dump_stack+0x1b2/0x281 [ 1718.944788] panic+0x1f9/0x42d [ 1718.947989] ? add_taint.cold+0x16/0x16 [ 1718.951953] watchdog+0x5ca/0xb40 [ 1718.955383] ? hungtask_pm_notify+0x50/0x50 [ 1718.959686] kthread+0x30d/0x420 [ 1718.963033] ? kthread_create_on_node+0xd0/0xd0 [ 1718.967690] ret_from_fork+0x24/0x30 [ 1718.972118] Kernel Offset: disabled [ 1718.975744] Rebooting in 86400 seconds..