0100)='./file0\x00', 0x0) rename(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00') stat(&(0x7f00000001c0)='./file0\x00', 0x0) 22:12:23 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_BSZGET(r0, 0x5450, 0x0) 22:12:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x5450, 0x0) 22:12:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x8901, &(0x7f0000000000)) 22:12:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) pwrite64(0xffffffffffffffff, &(0x7f0000000580)="30adfebeaffc628479e26b2fd3a6625719987f7d05c053a5732bce4d3993f86db6f065f5939971a2f3189ebfdb8b26a28b367a042c0af141f93ba3d6eccf8aff60ef02f9ec784250aee3c73af9860f8008b1c1cdd654369b16dda82fd8a57aa3dc1715e1f58328fa001c3a4142d5086a221aea7e75393803e9519898113c2a5ed290a43286837345ed488c6da3dfaedbe090f15a1a1859f67a7e", 0x9a, 0x7) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') chroot(&(0x7f0000000000)='./file0\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x3) ioctl$TIOCNOTTY(r0, 0x5422) 22:12:23 executing program 4: 22:12:23 executing program 2: 22:12:23 executing program 0: 22:12:23 executing program 1: 22:12:23 executing program 3: 22:12:23 executing program 4: 22:12:23 executing program 2: 22:12:23 executing program 0: 22:12:23 executing program 5: 22:12:23 executing program 1: 22:12:23 executing program 3: 22:12:23 executing program 4: 22:12:23 executing program 0: 22:12:23 executing program 2: 22:12:23 executing program 5: 22:12:23 executing program 1: 22:12:23 executing program 3: 22:12:23 executing program 0: 22:12:23 executing program 4: 22:12:24 executing program 2: 22:12:24 executing program 5: 22:12:24 executing program 1: 22:12:24 executing program 3: 22:12:24 executing program 0: 22:12:24 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8980, &(0x7f0000000200)) 22:12:24 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0xfffffffffffffffe) 22:12:24 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x1, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x7, 0x8a, &(0x7f0000000180)=""/138, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:12:24 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5421, &(0x7f0000000200)) 22:12:24 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x6dc695b5bdf8adf3}, 0x14) 22:12:24 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5451, 0x0) 22:12:24 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000002380)={&(0x7f0000002280)=@file={0x0, './file1\x00'}, 0xa, &(0x7f00000021c0)=[{&(0x7f0000001080)="0e441306463705cdf9e349ee80225fdd327a7e4f0626006e14154ed651a7ded3bcb85f17c7ffec85e72474122363788aadc12678ae26f04a6f0bfa1cd2aefb7fad1a2d8f584e88f01237997202baab59965d0fab067760d9202a00bdefec163c106dbbc3513079280365f0faa7c3603d8942f31747cba9c7b5f6fcfb21a7a6892df8db442e793e13b809bf736205803439fcb2919455e04e72c5a5b7317f9399f3f670621017488bc9fb4b92d33565f77dffc758d68aa64463e62d128151d1ea9b2d594b5ca97891deb65f8e6ccdba2be7d744b0e48e1a13bd66fb6fb8b33ac72aadacc0700fa9a5e6e4ae61fbeb4f32", 0xf0}, {&(0x7f0000001180)="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", 0x641}], 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB], 0xd0}, 0x0) 22:12:24 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000100)={0x0, 0x10000000000028}, 0x10) 22:12:24 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000), 0x0) 22:12:24 executing program 1: semctl$SETVAL(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)) 22:12:24 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 22:12:24 executing program 0: socket$unix(0x1, 0xb1b62b5ffe04f98f, 0x0) 22:12:24 executing program 4: r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)) 22:12:24 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 22:12:24 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000240)) 22:12:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000100), 0x8) 22:12:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$getflags(r0, 0x4) 22:12:24 executing program 4: writev(0xffffffffffffffff, 0x0, 0xfffffffffffffefc) 22:12:24 executing program 2: 22:12:24 executing program 0: 22:12:24 executing program 5: 22:12:24 executing program 1: 22:12:24 executing program 3: 22:12:24 executing program 4: writev(0xffffffffffffffff, 0x0, 0x51) 22:12:24 executing program 0: 22:12:24 executing program 2: 22:12:24 executing program 4: 22:12:24 executing program 5: 22:12:24 executing program 1: 22:12:25 executing program 3: 22:12:25 executing program 0: 22:12:25 executing program 4: 22:12:25 executing program 2: 22:12:25 executing program 1: 22:12:25 executing program 5: 22:12:25 executing program 0: 22:12:25 executing program 4: 22:12:25 executing program 3: 22:12:25 executing program 2: 22:12:25 executing program 1: 22:12:25 executing program 5: 22:12:25 executing program 4: 22:12:25 executing program 0: 22:12:25 executing program 3: 22:12:25 executing program 1: 22:12:25 executing program 2: 22:12:25 executing program 4: 22:12:25 executing program 5: 22:12:25 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x6, 0x0) 22:12:25 executing program 0: r0 = semget(0x0, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000000)) 22:12:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 22:12:25 executing program 2: 22:12:25 executing program 4: 22:12:25 executing program 5: 22:12:25 executing program 3: r0 = open(&(0x7f0000000280)='./file0\x00', 0x200, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1, 0x0, 0x0) chown(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) 22:12:25 executing program 0: pipe2(0x0, 0x18000) 22:12:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000040), 0x4) 22:12:25 executing program 2: r0 = socket(0x2, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:12:25 executing program 4: r0 = socket(0x2, 0x3, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 22:12:25 executing program 5: fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0) 22:12:26 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 22:12:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x200, 0x0, 0x0) 22:12:26 executing program 0: semget(0x0, 0x3, 0x240) 22:12:26 executing program 5: r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 22:12:26 executing program 2: fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0) 22:12:26 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000880)) 22:12:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) 22:12:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000100)=[{&(0x7f00000000c0)=')', 0x1}], 0x1, &(0x7f0000000200)=[@rights], 0x10}, 0x1) 22:12:26 executing program 0: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 22:12:26 executing program 4: socket$inet6(0x18, 0x0, 0x6) 22:12:26 executing program 3: r0 = socket(0x2, 0x3, 0x0) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000080)) 22:12:26 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000040)=""/12, 0xc) 22:12:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x0) 22:12:26 executing program 2: fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 22:12:26 executing program 0: r0 = socket(0x2, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x18, 0x1}, 0xc) 22:12:26 executing program 5: accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 22:12:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/77, 0x4d) 22:12:26 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) 22:12:27 executing program 2: 22:12:27 executing program 5: 22:12:27 executing program 4: 22:12:27 executing program 1: 22:12:27 executing program 0: 22:12:27 executing program 2: 22:12:27 executing program 5: 22:12:27 executing program 4: 22:12:27 executing program 1: 22:12:27 executing program 0: 22:12:27 executing program 2: 22:12:27 executing program 3: 22:12:27 executing program 5: 22:12:27 executing program 4: 22:12:27 executing program 1: 22:12:27 executing program 0: 22:12:27 executing program 2: 22:12:27 executing program 0: 22:12:27 executing program 1: 22:12:27 executing program 4: 22:12:27 executing program 5: 22:12:27 executing program 2: 22:12:27 executing program 3: 22:12:27 executing program 1: 22:12:28 executing program 5: 22:12:28 executing program 3: 22:12:28 executing program 1: 22:12:28 executing program 4: 22:12:28 executing program 0: 22:12:28 executing program 2: 22:12:28 executing program 5: 22:12:28 executing program 3: 22:12:28 executing program 0: 22:12:28 executing program 2: 22:12:28 executing program 4: 22:12:28 executing program 1: 22:12:28 executing program 5: 22:12:28 executing program 3: 22:12:28 executing program 2: 22:12:28 executing program 0: 22:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={0x0}}, 0x8000) 22:12:28 executing program 1: 22:12:28 executing program 3: 22:12:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, &(0x7f0000000200)) 22:12:28 executing program 2 (fault-call:5 fault-nth:0): unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:28 executing program 4 (fault-call:8 fault-nth:0): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:28 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180), 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socket$inet6(0xa, 0x2, 0x400) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 22:12:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x739, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) 22:12:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x35, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000040)={{0x1, 0x0, @reserved="cd68bb00c52edd0aa476ff0f4ba3408b5a1e0d467bf996c01feba78611e616a8"}}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fchmod(r0, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 411.443593][T15721] FAULT_INJECTION: forcing a failure. [ 411.443593][T15721] name failslab, interval 1, probability 0, space 0, times 1 [ 411.508513][T15721] CPU: 0 PID: 15721 Comm: syz-executor.4 Not tainted 5.9.0-rc7-syzkaller #0 [ 411.517234][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.527360][T15721] Call Trace: [ 411.530784][T15721] dump_stack+0x198/0x1fd [ 411.535181][T15721] should_fail.cold+0x5/0x14 [ 411.539947][T15721] should_failslab+0x5/0xf [ 411.544426][T15721] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 411.550516][T15721] kmem_cache_alloc_node+0x50/0x430 [ 411.555808][T15721] __alloc_skb+0x71/0x550 [ 411.560275][T15721] netlink_sendmsg+0x94f/0xd90 [ 411.565064][T15721] ? netlink_unicast+0x7d0/0x7d0 [ 411.570125][T15721] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 411.575429][T15721] ? netlink_unicast+0x7d0/0x7d0 [ 411.581988][T15721] sock_sendmsg+0xcf/0x120 [ 411.586427][T15721] ____sys_sendmsg+0x6e8/0x810 [ 411.591209][T15721] ? kernel_sendmsg+0x50/0x50 [ 411.595900][T15721] ? do_recvmmsg+0x6d0/0x6d0 [ 411.600664][T15721] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 411.606762][T15721] ? lock_downgrade+0x830/0x830 [ 411.611727][T15721] ? _parse_integer+0x132/0x180 [ 411.616639][T15721] ___sys_sendmsg+0xf3/0x170 [ 411.621252][T15721] ? sendmsg_copy_msghdr+0x160/0x160 [ 411.626673][T15721] ? __fget_files+0x272/0x400 [ 411.631371][T15721] ? lock_downgrade+0x830/0x830 [ 411.636361][T15721] ? lock_is_held_type+0xbb/0xf0 [ 411.641348][T15721] ? find_held_lock+0x2d/0x110 [ 411.646133][T15721] ? __fget_files+0x294/0x400 [ 411.650956][T15721] ? __fget_light+0xea/0x280 [ 411.655567][T15721] __sys_sendmsg+0xe5/0x1b0 [ 411.660073][T15721] ? __sys_sendmsg_sock+0xb0/0xb0 [ 411.665119][T15721] ? check_preemption_disabled+0x50/0x130 [ 411.671807][T15721] ? syscall_enter_from_user_mode+0x1d/0x60 [ 411.677719][T15721] do_syscall_64+0x2d/0x70 [ 411.682246][T15721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 411.688154][T15721] RIP: 0033:0x45de89 22:12:28 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x12}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 411.692056][T15721] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.711668][T15721] RSP: 002b:00007f2ff9df3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.720090][T15721] RAX: ffffffffffffffda RBX: 000000000002e600 RCX: 000000000045de89 [ 411.728100][T15721] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 411.736083][T15721] RBP: 00007f2ff9df3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 411.744066][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 22:12:29 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) [ 411.752311][T15721] R13: 000000000169fb6f R14: 00007f2ff9df49c0 R15: 000000000118bf2c 22:12:29 executing program 4 (fault-call:8 fault-nth:1): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x19}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x402}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa140}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000041000/0x2000)=nil}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000400)={0x8, 0x35, 0x0, 0x2}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cf]}) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048044}, 0x14000040) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 411.922404][ T8192] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 411.925836][T15744] FAULT_INJECTION: forcing a failure. [ 411.925836][T15744] name failslab, interval 1, probability 0, space 0, times 0 [ 411.974081][T15744] CPU: 0 PID: 15744 Comm: syz-executor.4 Not tainted 5.9.0-rc7-syzkaller #0 [ 411.982877][T15744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.985796][T15739] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1759521123 (14076168984 ns) > initial count (8814935168 ns). Using initial count to start timer. [ 411.993021][T15744] Call Trace: [ 411.993049][T15744] dump_stack+0x198/0x1fd [ 411.993071][T15744] should_fail.cold+0x5/0x14 [ 411.993092][T15744] should_failslab+0x5/0xf [ 411.993106][T15744] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 411.993129][T15744] kmem_cache_alloc_node_trace+0x55/0x430 [ 411.993145][T15744] ? __alloc_skb+0x71/0x550 [ 412.043682][T15744] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 412.049246][T15744] ? kmem_cache_alloc_node+0x38d/0x430 [ 412.055671][T15744] __kmalloc_node_track_caller+0x38/0x60 [ 412.061318][T15744] __alloc_skb+0xae/0x550 [ 412.065662][T15744] netlink_sendmsg+0x94f/0xd90 [ 412.070453][T15744] ? netlink_unicast+0x7d0/0x7d0 [ 412.075406][T15744] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 412.080699][T15744] ? netlink_unicast+0x7d0/0x7d0 [ 412.085687][T15744] sock_sendmsg+0xcf/0x120 [ 412.090139][T15744] ____sys_sendmsg+0x6e8/0x810 [ 412.094917][T15744] ? kernel_sendmsg+0x50/0x50 [ 412.099599][T15744] ? do_recvmmsg+0x6d0/0x6d0 [ 412.104205][T15744] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 412.110197][T15744] ? lock_downgrade+0x830/0x830 [ 412.115089][T15744] ? _parse_integer+0x132/0x180 [ 412.119955][T15744] ___sys_sendmsg+0xf3/0x170 [ 412.124583][T15744] ? sendmsg_copy_msghdr+0x160/0x160 [ 412.129902][T15744] ? __fget_files+0x272/0x400 [ 412.134594][T15744] ? lock_downgrade+0x830/0x830 [ 412.140149][T15744] ? lock_is_held_type+0xbb/0xf0 [ 412.145093][T15744] ? find_held_lock+0x2d/0x110 [ 412.149874][T15744] ? __fget_files+0x294/0x400 [ 412.154564][T15744] ? __fget_light+0xea/0x280 [ 412.159173][T15744] __sys_sendmsg+0xe5/0x1b0 [ 412.163683][T15744] ? __sys_sendmsg_sock+0xb0/0xb0 [ 412.168749][T15744] ? check_preemption_disabled+0x50/0x130 [ 412.174483][T15744] ? syscall_enter_from_user_mode+0x1d/0x60 [ 412.180386][T15744] do_syscall_64+0x2d/0x70 [ 412.184834][T15744] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 412.190727][T15744] RIP: 0033:0x45de89 [ 412.194623][T15744] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.214234][T15744] RSP: 002b:00007f2ff9df3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 22:12:29 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x2, 0x0, 0x0) [ 412.222655][T15744] RAX: ffffffffffffffda RBX: 000000000002e600 RCX: 000000000045de89 [ 412.230633][T15744] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 412.238611][T15744] RBP: 00007f2ff9df3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 412.246590][T15744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.254563][T15744] R13: 000000000169fb6f R14: 00007f2ff9df49c0 R15: 000000000118bf2c 22:12:29 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x3, 0x0, 0x0) 22:12:29 executing program 1: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x3, 0x1000000000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='numa_maps\x00', r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='blacklist\x00', 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getpid() sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0304bf4c", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) [ 412.359090][T15746] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1759521123 (14076168984 ns) > initial count (8814935168 ns). Using initial count to start timer. [ 412.422311][ T8192] usb 6-1: Using ep0 maxpacket: 32 22:12:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="b805000000b94a0000000f01c10f00d4b93c0200000f320f0666b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f"}], 0xaaaaaaaaaaaad5f, 0xb, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:12:30 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x4, 0x0, 0x0) [ 412.563175][ T8192] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.599139][ T8192] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.659843][ T8192] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 412.690184][ T8192] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 412.736376][ T8192] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 412.786740][T15727] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 412.983271][ T8192] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.004443][ T8192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.043304][ T8192] usb 6-1: Product: syz [ 413.064087][ T8192] usb 6-1: Manufacturer: syz [ 413.087041][ T8192] usb 6-1: SerialNumber: syz 22:12:31 executing program 0: pipe(0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r0}}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x60) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000400)=@req3={0x20, 0x6, 0x5, 0xffffffff, 0x0, 0x1f, 0x4}, 0x1c) openat(r3, &(0x7f0000000700)='./file0\x00', 0x6000, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x128}}, 0x0) 22:12:31 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x5, 0x0, 0x0) 22:12:31 executing program 1: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x3, 0x1000000000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='numa_maps\x00', r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='blacklist\x00', 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getpid() sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0304bf4c", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 22:12:32 executing program 5: syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000001ac0)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902890003010000000904000000010100000a24010000000201020a2408000000007f63d209240300000000000009040100e90002000009040101010102000008240201000000000905010900000000000725010000000009040200010102000009040201010102000007240100000200082402010000008009058209080000000007250100000000"], 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000000)={{0x1, @addr=0x3}, "78b5f1154f927ba286577880ff192278b22aa57ec5d4a82d3de0681fd1409652"}) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) 22:12:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1015, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x100) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc016761467490472e2880958ef2c2640569d34ed3f860a44de285b7bd8cbe172e694f60f80360f4f72c47b479c8ea21fb89f9cdbefee3316f46c937dbe8803ac105ce81a4c0ddf0883897637b2c48368ae83e425454bb70fb622dbca39ec20772f1783c4ec6689090f9e7bec4ceee011df9d6", @ANYRES16=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r0}]) 22:12:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:32 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x6, 0x0, 0x0) 22:12:32 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000040)={0x0, 0x7, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz0\x00', {0x0, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f], [0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080)={0xffff}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 414.663158][ T8192] cdc_ncm 6-1:1.0: bind() failure [ 414.684341][ T8192] cdc_ncm 6-1:1.1: bind() failure [ 414.735352][ T8192] usb 6-1: USB disconnect, device number 4 22:12:32 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x500, 0x0, 0x0) 22:12:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1015, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x100) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc016761467490472e2880958ef2c2640569d34ed3f860a44de285b7bd8cbe172e694f60f80360f4f72c47b479c8ea21fb89f9cdbefee3316f46c937dbe8803ac105ce81a4c0ddf0883897637b2c48368ae83e425454bb70fb622dbca39ec20772f1783c4ec6689090f9e7bec4ceee011df9d6", @ANYRES16=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r0}]) 22:12:32 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:32 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1ff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x8800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="1100000800000000001818"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 22:12:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:32 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x100000) [ 415.222407][ T8192] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 415.503417][ T8192] usb 6-1: Using ep0 maxpacket: 8 [ 415.632438][ T8192] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 415.644973][ T8192] usb 6-1: config 1 has no interface number 1 [ 415.660391][ T8192] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 415.707539][ T8192] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.750710][ T8192] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.952825][ T8192] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.961930][ T8192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.982533][ T8192] usb 6-1: Product: syz [ 415.986788][ T8192] usb 6-1: Manufacturer: syz [ 415.991382][ T8192] usb 6-1: SerialNumber: syz [ 416.303201][ T8192] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 416.309602][ T8192] usb 6-1: 2:1 : invalid channels 0 [ 416.413075][ T8192] usb 6-1: USB disconnect, device number 5 [ 417.022465][ T8192] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 417.272468][ T8192] usb 6-1: Using ep0 maxpacket: 8 [ 417.406881][ T8192] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 417.415946][ T8192] usb 6-1: config 1 has no interface number 1 [ 417.423840][ T8192] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 417.437204][ T8192] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.450853][ T8192] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 417.612474][ T8192] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.621584][ T8192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.642361][ T8192] usb 6-1: Product: syz [ 417.646550][ T8192] usb 6-1: Manufacturer: syz [ 417.651136][ T8192] usb 6-1: SerialNumber: syz 22:12:35 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x1000000) 22:12:35 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:35 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000040)={0x0, 0x7, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz0\x00', {0x0, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f], [0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080)={0xffff}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 22:12:35 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40a0c0, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x0, 0x101, 0x3, {0x5, 0x3, 0x0, 0x400000}}) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) 22:12:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x3ff, 0x10000}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ptrace$cont(0x7, r1, 0x5, 0x200) gettid() tkill(r1, 0x15) [ 417.832712][ T8192] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 417.839709][ T8192] usb 6-1: 2:1 : invalid channels 0 22:12:35 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10000000000000) 22:12:35 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 417.933841][ T8192] usb 6-1: USB disconnect, device number 6 22:12:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x2) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x6}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}], 0x58) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x72, &(0x7f0000000200), &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xb4, "b4d4a002aff6601f7642ed0afd0494501e3da528c38601822edecb7818f0d4f93b627b2d3fc99f14d728f98fb147f3e0af7f3c1ced77c85a75f7ee025109462512c13e0a799139a2000bfd4b3900ec1780cbf01445445e48f3ef9efee5ca7e1b28bfda72f02521a339198c10d27eef5d964adfaf4888bbe38826619b3b7e0029a1138f42449841e914d4647b953ed0313b0cf81e558851299a814356ad77b45e201ef4f8e346c3fb4b40f3e8066277e1035e8244"}, &(0x7f00000000c0)=0xbc) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008b20bc08f00a57d056bf010203010902120001000000000904"], 0x0) 22:12:35 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x100000000000000) 22:12:35 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:35 executing program 2: unshare(0x40600) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000030301020000000000000000050001090c000200ffffffff000000ff080003400000e694080003400001000008000340000004010c000200fffffffb000000030800034000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000280), 0x10) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7341, 0x2, 0x1f}, &(0x7f00000000c0)=0x10) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/33, 0x21}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 418.472420][ T8192] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 418.732929][ T8192] usb 6-1: Using ep0 maxpacket: 8 22:12:36 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x10) 22:12:36 executing program 2: unshare(0x40600) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3f, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) [ 419.013122][ T8192] usb 6-1: New USB device found, idVendor=0af0, idProduct=d057, bcdDevice=bf.56 [ 419.032695][ T8192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.070398][ T8192] usb 6-1: Product: syz [ 419.100143][ T8192] usb 6-1: Manufacturer: syz [ 419.115565][ T8192] usb 6-1: SerialNumber: syz [ 419.130323][ T8192] usb 6-1: config 0 descriptor?? 22:12:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c75735615429f9c65725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000006300)={0x50}, 0x50) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xe0802, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)=0xae) 22:12:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:38 executing program 2: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe14, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40050}, 0x4011) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:38 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x10) 22:12:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x2, @ipv4={[], [], @rand_addr=0x64010101}, 0x1000}}, 0x0, 0x0, 0x1b, 0x0, "85183ff2d3029520362fa7ea019f99a3dd3f221ce0a34798da62495fa7e6735cb821c9031d52c7694bb5cc2bafbfad5febf3abdac0244db07d7794d0f5114aa6ea982cb46800f7baa77b38b9b2cc9e9b"}, 0xd8) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = fsmount(r0, 0x0, 0x80) ioctl$RTC_PIE_OFF(r2, 0x7006) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x310, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xab3, 0x25}}}}, [@NL80211_ATTR_TX_RATES={0x2c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x9, 0x4, 0x4, 0x30]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0xa}, {0x4, 0x4}, {0x0, 0x5}, {0x1}, {0x1}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x2}, {0x4, 0x9}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x2, 0x7}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x6}, {0x3}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0xa}, {0x4}, {}, {0x3}, {0x0, 0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfffa, 0x20, 0x9, 0xff, 0x45f, 0x0, 0x7]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x0, 0xc, 0x16, 0x9, 0x1, 0x2, 0x1b, 0x1b, 0x12, 0x5, 0xc, 0x9, 0x12, 0x1b, 0xb, 0x3, 0x9]}]}, @NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x6}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x4, 0x3}, {0x5, 0xa}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x3}, {0x3, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x7, 0x8, 0x37d3, 0x5, 0xfff, 0xf7a]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x60, 0x2, 0x48, 0x48, 0x1b, 0x6, 0x6, 0x1b, 0x30, 0x30, 0x60, 0x2, 0x16, 0x5, 0x48, 0x2, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x2, 0x7}, {0x4}, {0x6, 0x7}, {0x5, 0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {}, {0x0, 0x8}, {0x5, 0x9}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x28, 0x80, 0x4, 0x0, 0x5, 0x400, 0x2]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x6}, {0x5}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x7}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x7, 0x6}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x8}, {0x7}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x6}, {0x2, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x2}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x5, 0x6}, {0x1, 0x7}, {0x3, 0x2}, {}, {0x4, 0xa}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x5, 0xb, 0x75, 0x1b, 0x9, 0x3, 0xc, 0x5, 0x4, 0x6c, 0x1, 0x30, 0x5, 0x9, 0x2, 0xb, 0x67, 0x2, 0x6, 0xb, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x40, 0x5, 0x3, 0x400, 0xf909, 0x6]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {}, {0x4, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x2}, {0x0, 0x4}, {0x5, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x3}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x7}, {0x5, 0x6}, {0x6, 0x5}, {0x7, 0x6}, {}, {0x4, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0xa}, {0x2, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x3, 0xa}, {0x3, 0x3}, {0x7, 0x5}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0x5}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {}, {0x5, 0x1}, {0x3, 0x3}, {}, {0x3, 0xa}, {0x1, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x1, 0x2}, {0x6, 0x1}, {0x4, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe3b7, 0x8, 0x7, 0x5, 0x6df, 0x6, 0x400]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6c, 0x9, 0x4, 0x6, 0x30, 0x1b, 0xc, 0x6b, 0x24, 0xb, 0x3, 0x18, 0x60, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x6c, 0x24, 0x12, 0x30, 0x8, 0x2b, 0x1, 0x30, 0xc, 0x6, 0x30, 0x1b, 0x2, 0x3, 0x60, 0x16, 0x48, 0x2, 0x1]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x8001, 0xca, 0x0, 0x7, 0x7, 0x3c5]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x2}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x1b, 0x2, 0x4, 0x1b, 0x4, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x24, 0x60, 0x24, 0xb, 0xb, 0x2, 0x1b, 0x4, 0x4, 0x6c, 0x8, 0x4, 0xc, 0x3, 0xc, 0x6c, 0x18, 0x2, 0x6, 0x18, 0x18, 0x36, 0x18, 0x36, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x5, 0x5, 0x99ff, 0x3, 0x7f, 0x9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7a36, 0xff, 0x8, 0x200, 0x6, 0xb1, 0x7]}}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99}], @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x310}, 0x1, 0x0, 0x0, 0x80}, 0x4) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000004680)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "c1284519155e2cc5c296007fb89125647eb0bf11018bb6b404203af05052d8eff7d43c0385ee1494fc0f080fe7f28f0d437fe474c04e0100ffffffffffffbcd2afb390a9d03346fb7781670c05db5f5a"}, 0xd8) 22:12:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000280)={r4, 0x5, 0x8f41, 0xffff9f33, 0x4, 0x4, 0x7ff, 0x2, 0x200, 0x200, 0x4, 0xbcb7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={&(0x7f00000000c0)=[0x6, 0x5, 0x0, 0x4, 0xfff, 0x5b0, 0x95, 0x1], 0x8, 0x20, 0x8, 0x8, 0xfffffffe, 0x6ad, 0x6, {0x6b, 0x3f, 0x4, 0xffff, 0x5, 0x1f, 0x7f, 0x81, 0x3, 0x4, 0x8, 0x8, 0xffff, 0x4d, "9fb6641b75effa8234b478dff5f96b16182ecada73a107cae38382556a5f3ed4"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c000729d50014750000000007070000", @ANYRES32=r7, @ANYBLOB="0a0f66000a"], 0x42e}}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000100)={'ip6tnl0\x00'}) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) 22:12:38 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x10) 22:12:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 421.154897][ T8186] usb 6-1: USB disconnect, device number 7 22:12:38 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x7f, 0x1, 0x2, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000001c0)='0', 0x1, r1) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/138, 0x8a}], 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6088c62ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076a1098b24776c75244c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/4143], 0x1020, 0x40}, 0x38, 0x10000) keyctl$set_timeout(0xf, r1, 0x400) mq_getsetattr(r0, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x191a7, 0x0, 0xf59, 0x7, 0x0, 0xfffffffd, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) clone(0x1440200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 22:12:39 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c75735615429f9c65725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000006300)={0x50}, 0x50) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xe0802, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)=0xae) 22:12:39 executing program 2: unshare(0x40600) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) write$UHID_INPUT(r0, &(0x7f0000000000)={0x8, {"4a328188bdc481dc0b290d6edbb8d87e5081272c904ce17c0ac286ad20db43b07be4eac710b7e809a0caa56e0bda9dccd059936918b0df42a9e9e3392b6007df8a82b838ec26329d76a12ed90aab88c97d09d29384327a74ce0dbd2cb41fe4cb697144c1ae71328a174af7a35bdfa0cb5717bdc9feef6685244175d8ef231a4fd3a4f8603d282f693874404416b1af6fc0c5176992facddca112b93f83313414445e45039fe6cb0f97cb0e5f59cfbc0d4ac485e337db2ed070b29195507b757041a0e2ff94c03b74a5db2dfa01b10b95bfa9fb6b75c98d9cbbb7755f240f766ee7ca31857d260fc0ee58fbd3c0ff662bf4b9b1414b1918449ad16c2e485ae7186e02222dcd9c6ae0fee0dde26af21f7db48ee4adc69556c39d7b8838b785fa34557deae348a6ff35c5592724d6f92dd2d1da6a93dbdec59df4419bf3cdaa612a8d6afc7ec2c1816f32193714fee401d3ee76f5e4a212741e649498e42f7de3d17929b7e1f16bcc34ffd7dca29852659e96ec945e8b47c485dd58d19a7d59ab7a0e5b2b082c3d04688974671aeb1313d51e060b9661761a7e34843399745716ff650f324fe5c74c3b8061b40fe1774c90968b8126298ca2e6644d92d05a158c1e7a4816c4acef296553329de40ce8245b826256c7f5ccc5daf18c367e3c2e58154e72d814d4b04ef679694ac28dc6698f549884caa73099e672bd6124b044ce1d20ac39aec3609f6740e06e3fcb88b70cbb8e5c8498ca9a07d3e120d350673572af32930ae584081aa80957b31c5a34177a95c19c2a1fa22ad7e526acfb1984ae43d351e9f2d627526b413960f379bc3c7be68adaf1f88a174d006f07bcc6884b056ffeb2a924ef80487102739d07fb3452a155472dd3e8d7f78585fc7ddb02e18280b4a5157350644f82c7dc741a257cd4a1c443b80b7fad516dae937af2f39d57d63ef7bc9413911f635e3e45fc21940937a3b6815f3b1a483d8d682ec543b601da4c2f975b16b9305bf0eeb0fae1e436381214b413744ea6c90b8d082738f7007ac394ef2436fd4e31d04d2feb9d19db66dc6a0fa18cf00832a8cdf3c1dbadee9a9c23b1734031b2811dbbf46d5219e1a68f7089f1301019d176bfbb40f9f9ac9d8df045d43e3fe200db22855bfdf41cab9d08d47321c3d21d687bc393c81ce1ab1a3fc23ae09083d3b9e7ac61457968f4159d030a1bc124d76f81badb922b3f9d1358765bd889f82be2d9fadc443cdaea1cc548ffe78cfbd1aabaf9973b51b23d849dee2d09ad301ea95bf5aaaed4bbec148f83db1145a6eb769486d645b3e6d02087043a7bb2c78881ac777bc5e2134cbae10a30b37825b7478ebb29ce9bbdc01895224e943bf224e025ba9464d9a29638d7765be0f41201f56d475b75f03f61403e52b87bfec20ee4f7a11bfc56fe0b11240a0aa26b8282cb44a446eb03290db5c1325cdc0d51bc418945405272396fc0c5b05359a47e445277d1818ccd62f76a3c5fb3568443b7b682a7e09c7b5c036482bd0aaf30cb187e1850dd714c67f4c071b922699a2c1cdff5422c231db56675c2705c21524de5f8692b7a7f6625a1a3d9fea3725ba192173a0972e74db99b22ac221062ac6a18ff32412f4ef36e6df4024a511a8f955285c7142daeb6e674d9afbd9057e09356cba5757a59f2a80dd60766aa2e7c86df4b690d4313c09970aa117f8f52c9b236903e7300c7cb5212ff6305f9b0fbea282be496b75d203c120746690a258bc077215e01bd75e65a573b4e4bc7bf3077d9de6a886dd7499104a5f94ad266cd6c71a25ee995b9532c3d03cdb91e9bc1cee1c11041c6daf43bccc337216e76254bdf25704f88f7544d859f5721c60d89ff6e330271b265c205740c1e50d401fd4e4e45bea9e0d89cf61f9854a7f308fe629c65ae04eef74cb2435fd013451371ccd5e9d3b71eda11b7518a2735b08dd3d46aa0ecd77d93610db5122dcb2fb38c2d1751d37b036b94eb478c6880615045ac453a848e3e246a9e0c76c8766b14ecadfdce485add4a906101b39cea9d20dbb44c3e7707baf3c2e7bdabd912826c5254f56105459f6f525eadc8216d58184af4940f8a1ab83da1b56fd74863ed86accd94e2247cd208105dc1b0f57372b856a96ad21709b09130d36fe6bf295c0d661bed6d6441ce20be1ab28baa33c6842d55ee1e19daaf77cda0e71e0dfe6c96c079166f7c390f6198b45462e586b6a9694a2b04e004b3629aea865d16b202bb1f8bf5dc7a5ee7a2a52445b25ed7cbd3c40c3245e6d9a636d6a70744a35e495e8a802de10af4eff220596805912cf053642e0e5f2e140990138077173a7b8e540b1827e1716d634bf55978f272e122b3f744e39af9b3177ec79850ca4a7230921b5d2b5e8b62ff8b8b5f5f7e2febdf0641098cf311747dfafff6d7c324f80bf06ec0acb669f1872119648b96a97c84dd0de56c306b782ced28ee8159eb32d0048262f3c751ba68acab0eaa7222997d7d1bff525cf7522a88ef8437716e85cb524cad7510489163a2393ea9764d6a57d9934566577ba8548eb92fc4c30a39858f3663e62c921aa27bcadfa04b2407af6880e8a4fb053497309daabb9acbf0ab416ae06b8a069d7a9abcf125d4a9dd723232f9696065e7363134a9c93ffc313d983f36ae912f7b93fa6314abd5fdc1fa0b2d6b413d22d0cfe32ded1d9f27ffa3159e44537faeb70b5ddd991fcf38018818547a4b295324d326506965974246e21f014589a244d98bb374e730a5713e7a2ef4b8c2da627a594b3ecfbe2f9175fe51d217f360ab304f8eb25080fff9d485dec5d861998de785e82ece76b862d830100b25373fab6ee4c1d8707be9da4d8215b0c89d775590ded34ab88472e88dae6a2a19ce9ab6d49cbbeaf038d35b0ba5a60798ebec170385268af6e98388cfd6aa2e89a66c9c1a17a7ed66f8e5316252d083cb7370474a57433139b7e8af118d5b3515cbc877d83ca78e5f5bb10e3da902ebd5b38294b62eab6e2bd8e5fe05ead94d1f67cea13307f44be6347472c2b56aee2d54c86bdff3609a4b32b9d46a57ba8443dbbe773132679881500326dda90c60ca4934846219a54864f736823abca8a34957c5883bc6784a961cc46e0e19a72c348b6f7cea10625b7c2cd303bb9d05ae2299cdcf516c7aa5a6d5505b81c8637fe1762174b5c0630f2a67bb7a872991f7ecbad306f0327b41a6c1e899848c2754efbf30f2c2ecac59293ac55c0adf9e73dc2629d9551b6a33aa36b35ec793ef73b70cdf0f34cf9bb2c2b45ccc67fc1467b34f55de9e249e8a158d93000dade38f9ab911e5c80840966fc0e3170266d5327693c52baff60351dbabd9822c8ea95b8771c21aa2602b2bc5d0c937da90f5af60e5fb14f85967e917a2254f55df7e1eb476e276f6c2c1240faa3faef851ecced45ae6e20d5bbd403a9757c084d3d7a3293ee1f20e61d012541c1bf4d21e13eccb554fd1fffcd6966e38a013f46deea10ca9bdadbe6dfa2114d518f6aba659dddbc5bbeb0fe5747606522a94fdc7ca71f060bb9d9e359968c246fc50ff9766a7d36125d880139efc2ff9a0bc029f7d0c42160ef7d91683e5a73d032f7ca48d6dde91040a7e76619389ceac04d739d35636b689a332a1593af2d9c8285d1866066617b70f5ec382ec32c1ad315246c1ecc84cdc3c6487526d01cdef6b311eb809c6da6480c98ae1b011589b309917179dd0eee855098341bbd64e93673097b8c229222797b65d4b1b63992bd5dd81978e9b4cfcfe991ee35ed39b2af525000d08c52113fd8d9db0281cf5dba100c8d5b74245a1303a518cf7f82346684edf08ec6ef1b6b92eb5ef2f6e052b589dd40ae89f4ee90500aa6a016f5336a6fecdbb0e08da4bf0b5b3b8e1568848dbab16958732a3319adf707fbfa9c02694ecb84b0e4caed7edd006cd1bb8c66cdaf90bf731f007e687f2255b02f4657bda78aa42c764089e4abe526119016cab114923d0c1f84d0def1ae1d2debf5dd268a1dce7f6ef0385da10ad46000f423549f1c198487d888b6cd0c2d2ac53ed3b345ae33daea79b53cd6fdfc9f92eea6773f75873a7c9f7cd276c75e30aebd7b4a610378af4c4f9c73e7074b7ebf28aad5bfb200b6fcf08315c67520f0dd0c06593d1f1e84bddf02b9b2238a8f8ec669b38a2098fa8c1d706db05ce341fe9ff0cdd08d6fb4c4b077051273da368a2d2a573f7f83b905e310b581a5ae1b5ff373c05e992846ace9b62e15e689482a494a28c857dec6f85ea5041b277d7c88b9537412c98e56ae218863ff69cb0ba570081aa67c45c754c2da1e64ea0182137d3ba3ef90df8c38640d9e584c8bcc93b94797047674c4f7121b65db7b97376ef1a6257b8a201ab87b4391cd48e57d830e9f1d02f6c4ed856aba12410aa1509460c9234e158696caaa2610b7f6fbf02a5f3aa3ed4d7f080c4b5932de3f2c570363119e31885c65138cd014c9ece086dd898dc8cdfe48ec0ab4d9dfadfcaaea9c4bab30a74622672878718901fea3e42ce7df1b7d993ddb197ba2d8f2275a5aac6dcd2cc565b1256822657cf66e67f45788430a6f52074cc3a335d7ad568f979b73639d50aafbb64b285c9c2b66576454e2b0d198780211fb7cb99fc0042c6671ece8ac78c9385b29198e8dedf639ff4bd67363709025028af8349c0908294a8dd9d69cf8a70b0cb6602e7d09b3ecf8626622c571303f698116f46d98fefca2b1c723a783e03765429bc116b116f9ac9ff37f50e6e4e2a334fb84e188c534e0198567edd887b7b9a872d98712addc5cdcfb3e78c40d8895a7390295431db72b36821ce22e9179f54886300517f450bc6dde2436307e847bf9f46bc1c2d70acc8caab007d69c7da7ec43128aea725cabeebf904a4cb0caba3fa12f4e952f29691300ab24b9b1641854deb879c6fec6ed4942d4fca25c903db4d504ec44449f16a1d2d2b40dd801438c50271ceef8c54eb04649235f5161f8a6ce4e23114c6724605b3bedf0a70cbfe10e266bc35a93ab3ceb9072dd01c3b468a9774edad138288f4c9443f0e054e9b3020d570fe33eb377a831060c8c5010ffc725b012a7df3cfbe636815ea976dc4337451a44223726ec0befec0f52a72fc3f7afec4e3e937255e367822a653b80c4cd6f745b53d0ea5011901e6a1e4f0c8c82813e71143fefca08af1e09a389c0f9a4d75ad1ceea4ae47e191168a356610753ec1b70af3bbfbe1403afc060894ce73d86290aa8449dcb2bc7b2feab79f302965553858bc2f10cb7e2ee6fc347855455c1e745912f53c85da4887238b96063be0186b8f345ca506ad106850eb1a3ca84f9cec924db6ca03f9b90a256c41bf8663fd51989d3618a6b76f06981c88a6128575011b520841c3f76b9872e82163b93d728932db53018fa0865d89e273be6de167dad42c59fa0d246f395f82d189ce8d9baad9f7ada26eb4591b108329b495c6341166a1c342facb7def950bb72590cd7151e7098b903d4b868b537add03942759dd2782ddf58c956e8224f67b6790959688c749e6ec436ae98c5752af56cbb0f9af26e1c9255ecde104e391d1ad7fe027049ce719c1208259cf19018a90cc87aad326a5bdba32d64ea84a303ce487c2f1efe4f986e133319a04aa6552275ec2d77f151d8affc4b20b6ebe858eece56fb0504fcbc55d5d54fd329ec2e01f6a3b3298b09bfa3a884910175097aaba82656bc95c3e168175037722d2ffea05f0ae11a476625c2212ab5c3a1343c083b9066ec7f4b2e4384b764306afb46e6f4e40dae175a0afe7", 0x1000}}, 0x1006) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 22:12:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:39 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe14, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40050}, 0x4011) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:39 executing program 1: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x10001, 0x4000) close(r1) r2 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) r3 = add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff) keyctl$link(0x8, r2, r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000a80)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', 0x0], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00']) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000000)=0x1) 22:12:39 executing program 3: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:39 executing program 3: unshare(0x40600) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x10) 22:12:39 executing program 2: read$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)=""/151, 0x97) unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x600200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x46000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000100)=""/72) 22:12:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:39 executing program 3: unshare(0x40600) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x10) 22:12:39 executing program 3: unshare(0x40600) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x10) 22:12:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(0x0, 0x0) sync() ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:qemu_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008801) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x1c) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x0, 0xa28, @value}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 22:12:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:40 executing program 3: unshare(0x40600) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:40 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe14, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40050}, 0x4011) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:42 executing program 1: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x10001, 0x4000) close(r1) r2 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) r3 = add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff) keyctl$link(0x8, r2, r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000a80)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', 0x0], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00']) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000000)=0x1) 22:12:42 executing program 3: unshare(0x40600) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:42 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0x401, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:42 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r2) socket$inet_dccp(0x2, 0x6, 0x0) r3 = dup2(r2, r0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1d, 0x6051, r3, 0x83000000) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x150, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "4925012ee2affceec3523816d78212ca96116b96032b38c3f0cec1e176d608ae"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "7a113953b25091381b0c6b0f021e6768728937577c"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "9effd34a27add52ac05064f1a140906c7dceab77ab8b11ea"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff8000}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0xa0}, 0x4085) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40000, 0x12201}}, 0x20}}, 0x24002040) 22:12:42 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe14, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40050}, 0x4011) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:42 executing program 3: unshare(0x40600) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) unshare(0x40600) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) syz_io_uring_complete(0x0) 22:12:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:42 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x810, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1200, 0x2000000000002) socket(0x0, 0x0, 0x0) 22:12:42 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) sendto$unix(r3, &(0x7f0000000280)="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", 0x1000, 0x4, &(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = open(&(0x7f0000001300)='./file0\x00', 0x101400, 0x43) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000001340)={0x3, 0x8, 0x8000, 0x1000, 0x8, 0x20, 0x7}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) 22:12:45 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x40c, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:45 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x80, 0x4}, 'port0\x00', 0x0, 0x80400, 0x2, 0x80000001, 0x4, 0x6, 0x7ff, 0x0, 0x5, 0x8a}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x810, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1200, 0x2000000000002) socket(0x0, 0x0, 0x0) 22:12:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = dup(r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x64}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x800, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000280)=0x7, 0x4) fchdir(r5) close_range(r1, 0xffffffffffffffff, 0x0) 22:12:45 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r5, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xe14, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40050}, 0x4011) 22:12:45 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:45 executing program 2: unshare(0x20e00) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'vlan1\x00', @ifru_mtu}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x2000511) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000100)={{0x2, 0x4e23, @local}, {0x306}, 0x0, {0x2, 0x4e24, @local}, 'ip6tnl0\x00'}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) 22:12:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:45 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:45 executing program 1: unshare(0x66010880) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) 22:12:45 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x40000, 0x0) unshare(0x54040400) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) setsockopt(r0, 0x0, 0x7ff, &(0x7f0000000000)="c9985235c8cc94ced9c73ba16f36beea2d9ffca68beb59e3922b97866874fdb5e882d6e01d9b0f5ac9af1750d8bbc9cbf1e9f1e233c61cf68c7fb4ee1c0b100d99b2fb8eb636d560cc3ab1a2d4c08cabffa8a92ec0", 0x55) r1 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000100)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000001c0)={0x0, 0x2, 0x1ff, 0x1}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) 22:12:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:46 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x310d6671, 0xf8, "c2b8e52691999b11a667c9117cab6bf5811d44", 0x7, 0x9}) pidfd_open(0x0, 0x0) sync() sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6664d73eef19b0293d53cd2b42a33efd87687f19c333aea4d1fd150c8da84c958218716bae6d5130fd3e4b234a1489a77622c07633b71a3a3f48e26873cd1e01007d601567d2a37410ee6dec60c93132ffbc051f8ea1b26abf2162afc05b647181f6e1e1e6ed2e631ceeceb2a513228251e4b1ff15ac7b5058d16af85a772082d15e64e84d49ab62c139e36b0ac66233557d18b124b8a04e13f6a23c4ab201bf431b3de34932633ec76b893989c4cc0007e32a3fb5abbe59b4ffd33704249dcfa00f7f64b01edc9986baaa6ad5f24182d7e70cd3823ea1736557bd46b6b24bc022fc61bb9fa1d1efac1eabf1c7", @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYBLOB="827c6e969e306883c5c5af0ed17a"]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000006300)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10000}}, 0x50) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, r3}, 0x10) recvmmsg(r1, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x1c) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 22:12:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:46 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 22:12:46 executing program 2: unshare(0x40600) r0 = syz_open_pts(0xffffffffffffffff, 0x145001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0xa, 0x80006, 0x1, &(0x7f0000000000)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x1, 'netdevsim0\x00'}) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000, 0x22010, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000080)) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:46 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:46 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xc04, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:46 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:46 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='timers\x00') getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000300)={'broute\x00'}, &(0x7f0000000380)=0x78) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x4, &(0x7f0000000000)=[{}, {}, {@none}, {@none}]}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:47 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:47 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 22:12:47 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:47 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x20402, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x4a) 22:12:47 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:47 executing program 0: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x38}}, 0x2048800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440003000000010400000000009e000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005001c"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x29, 0x1, 0xe0, 0x425, 0x21, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x1, 0x7800, 0x3, 0x1ff}}) 22:12:47 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:12:47 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x110877bc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/159, 0x9f}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000280)={0x9, "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"}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x0, 0xb26, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_pts(r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 22:12:47 executing program 2: unshare(0x40600) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1, &(0x7f0000000240)=""/134, 0x86}, 0x41) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getlink={0x80, 0x12, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x10000}, [@IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x932b}, @IFLA_GROUP={0x8, 0x1b, 0x3ff}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x101}, @IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @dev={[], 0x23}}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip6_vti0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8040}, 0x20044050) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 22:12:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:47 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:48 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:12:48 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x5865, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:48 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 22:12:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:48 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x402100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:48 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r2, r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x4d, &(0x7f0000000080)={&(0x7f00000003c0)={0x1020, r4, 0x8, 0x0, 0x25dfdbfb, {{}, {@void, @void, @void}}}, 0x1020}}, 0x0) 22:12:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:48 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x6558, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:48 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xc4000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000040)={0x21, 0x3, 0x0, {0x2}}, 0x21) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:49 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:12:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x10) 22:12:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:49 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1404, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8081}, 0x2004c000) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) read$usbmon(r4, &(0x7f0000001340)=""/4096, 0x1000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xc5b, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8001, 0x4, 0xa9a]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x4000, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r5 = signalfd(r1, &(0x7f0000000340)={[0x401]}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000003c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:49 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x8100, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:49 executing program 2: unshare(0x40600) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:49 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_FPEXC(0xc, 0x20000) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x10) 22:12:49 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:49 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x34000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x10) 22:12:50 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:12:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:50 executing program 2: unshare(0x20680) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:50 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1404, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8081}, 0x2004c000) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) read$usbmon(r4, &(0x7f0000001340)=""/4096, 0x1000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xc5b, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8001, 0x4, 0xa9a]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x4000, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r5 = signalfd(r1, &(0x7f0000000340)={[0x401]}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000003c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:50 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x400300, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:50 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x2, 0x7fff}, 0xc) [ 432.917442][T16417] FAULT_INJECTION: forcing a failure. [ 432.917442][T16417] name failslab, interval 1, probability 0, space 0, times 0 [ 432.969838][T16417] CPU: 1 PID: 16417 Comm: syz-executor.3 Not tainted 5.9.0-rc7-syzkaller #0 [ 432.979242][T16417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.989338][T16417] Call Trace: [ 432.992647][T16417] dump_stack+0x198/0x1fd [ 432.996997][T16417] should_fail.cold+0x5/0x14 [ 433.001607][T16417] ? __sys_setsockopt+0x2db/0x610 [ 433.006814][T16417] should_failslab+0x5/0xf [ 433.011240][T16417] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 433.017324][T16417] __kmalloc_track_caller+0x6d/0x360 [ 433.022661][T16417] ? lock_is_held_type+0xbb/0xf0 [ 433.027612][T16417] ? lock_downgrade+0x830/0x830 [ 433.032559][T16417] raw_setsockopt+0xa2a/0x1290 [ 433.037393][T16417] ? aa_sk_perm+0x316/0xaa0 [ 433.041911][T16417] ? raw_sendmsg+0xa70/0xa70 [ 433.046514][T16417] ? aa_af_perm+0x230/0x230 [ 433.051078][T16417] __sys_setsockopt+0x2db/0x610 [ 433.055942][T16417] ? raw_sendmsg+0xa70/0xa70 [ 433.060549][T16417] ? __ia32_sys_recv+0x100/0x100 [ 433.065572][T16417] ? vfs_write+0x1b0/0x730 [ 433.070053][T16417] ? fput_many+0x2f/0x1a0 [ 433.074404][T16417] ? lock_is_held_type+0xbb/0xf0 [ 433.079355][T16417] ? syscall_enter_from_user_mode+0x1d/0x60 [ 433.085261][T16417] __x64_sys_setsockopt+0xba/0x150 [ 433.090389][T16417] ? syscall_enter_from_user_mode+0x1d/0x60 [ 433.096293][T16417] do_syscall_64+0x2d/0x70 [ 433.100720][T16417] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 433.106620][T16417] RIP: 0033:0x45de89 22:12:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 433.110521][T16417] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.130137][T16417] RSP: 002b:00007f5d17365c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 433.139537][T16417] RAX: ffffffffffffffda RBX: 000000000002f280 RCX: 000000000045de89 [ 433.148037][T16417] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000005 [ 433.156017][T16417] RBP: 00007f5d17365ca0 R08: 0000000000000010 R09: 0000000000000000 22:12:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 433.164006][T16417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.172013][T16417] R13: 000000000169fb6f R14: 00007f5d173669c0 R15: 000000000118bf2c 22:12:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:50 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:51 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1404, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8081}, 0x2004c000) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) read$usbmon(r4, &(0x7f0000001340)=""/4096, 0x1000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xc5b, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8001, 0x4, 0xa9a]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x4000, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r5 = signalfd(r1, &(0x7f0000000340)={[0x401]}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000003c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:51 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:51 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xac0}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map={0x18, 0x7, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x1c, 0x2, 0x8, 0x2, 0x7f}, @call={0x85, 0x0, 0x0, 0x59}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000540)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x9, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x2e7e}, 0x10}, 0x78) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x0, 0x6}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={0x28, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x354, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff8e31}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @local, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x101, @empty, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28c20000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x618}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed84}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff34}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53bc3dcf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbeeb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x280c8}, 0x41) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) mlock2(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000480)) 22:12:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) [ 434.147928][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:12:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x2, 0x0, 0x10) 22:12:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:51 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:51 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x3, 0x0, 0x10) 22:12:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)={0x80000000, 0x5}) chdir(&(0x7f0000000200)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x10010, r0, 0x384d6000) 22:12:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x4, 0x0, 0x10) 22:12:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:52 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1015, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x5, 0x0, 0x10) 22:12:52 executing program 2: unshare(0x70010480) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/158) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:52 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x6, 0x0, 0x10) 22:12:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_out(r0, 0x0, &(0x7f0000000200)) unshare(0x40600) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x44, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r5, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40001) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:12:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:53 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x500, 0x0, 0x10) 22:12:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:53 executing program 2: unshare(0x8000000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xc000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:53 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:53 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0xffffff1f, 0x0, 0x10) 22:12:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xc040000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:53 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x20000000, 0x4000, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:12:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:53 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x7ffffffff000) 22:12:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = socket$inet(0x2, 0x6, 0x4ebe) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="01000002c8"], &(0x7f0000000040)=0x9) 22:12:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:54 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)={0x34, 0x0, 0xef, 0x3, "799d89d153cffe3ad827369895f7335fe1bcba2d90785d327a11f228"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'sit0\x00', {0x4}, 0x2123}) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x10) 22:12:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x10000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x3f000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)={0x21, 0x1}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x7, 0x0, 0x6, 0x6, 0x4}, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) accept4$packet(r0, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001100)=0x14, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$audion(&(0x7f0000001180)='/dev/audio#\x00', 0x6, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000011c0)={0x6, 0x6, 0x8, 0x72}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f00000000c0)={{r5}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000003000000000000000104000000000000000000000000000000000000050000007f0000000000000007000000000000004f0c0000000000000061740000000000000010000000000000"]}, @subvolid=0x3}) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000001140)=0x401) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:12:55 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x501000, 0x0) signalfd(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:12:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:55 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4043, 0x3) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1008, 0x7, "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"}, &(0x7f00000010c0), 0x400) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:12:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x88a8ffff, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:56 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:56 executing program 3: setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000)=0x401, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) r4 = signalfd(r0, &(0x7f0000000040), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x310, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x2f4, 0x2a, [@random={0x5, 0xb3, "c934b1c960d4c3665218497b8644fb302e013b7487c2f0c0f55ef0e6c9696fead0f2d2f52f11ab1baedfcb2856288560e507add1ceb3a721b78482727416035c9afcb47f8b55abec27d6eac2c08cc192d293d4d1f02bc146b371bbe82548a6766a7b35a0c193f18e7be7e8111676ec569780738187c8aacd3a31abef1a9efe46c439f70d6b03f9af4b71aaf854c5425a82c3008cd29b7069e8ce354bfabc93546c6e986651746cd4b0d6e226b4ccf98d927e85"}, @random={0x7, 0x52, "10155a11053f1f4888bcbe022c233a2a9ce46430694c19d69ccc97eeb377cb271b5a1dcb554b6f910583e9bc70d5c874da306596e0903180773f200556293fd947b62aba1bd55d489f0d463d14db497779d4"}, @random={0xc1, 0xf3, "913c135db4ce4b43428d097a935852e85b556c6b477f131f736acd3d6e0b5cbc4335a8497434f06e704cba596857e9b6a50dc0da122ffe412595018ba1b9bddfa4bb4177fa76e1917fb42b8d184e0f255c5097e4c864f6d1558e54bb2225ad8d5861bab3cf65cdb231ef68192e83c35895166db64800845f39dd14e8b2477800cf23522b1137d89519e0ad8be68f8494039d8116e3b1d0b75e7d7b420501a03622790b1d629a541afe3907a8bfc2e010b5e2336e77519eaf1e6d7538ed94e6d15f76ef7d4b2d32db0d574158c038799c1735b6c6acb99afaf97d3493cb217269e859755d0b8b1e2fb116aacbb87ad3b076b91d"}, @random={0x1f, 0xa3, "4ba33b33f61734e7fa91099180c0f7bee4eeb75ebd1ab7530aff7e028d6cf64472eacdc53bdf883fae24b581ff3b11308f28961af467480b963e9b8ee6868d875f8afadb11906fadc6f933f2eef6d64e080cd628204286722ba5e2ccf43ced7dd8436e1642190054b335e9a34bbe65673ed38c5981b7e238304ad46003be1bc14f3b47da088b84baa49a8114b9696a949e6e4eea91e4deeda3096c6aebd1d94c2d42f5"}, @random={0x3, 0x4b, "edfe3f0f33947d871f348f810ab932d58e80c0cf528dfc11bba4fdd26cbe15d8a72bd878319ce0587b58cab5c0a5b0f5db9929ddc9292047d2632f735a0126099260cea900a0d2484c0e0d"}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000850) 22:12:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:56 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:57 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffa888, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x1, 0x0, 0x4, 0x0, 0x7, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc57, 0x1, @perf_bp={&(0x7f0000000280), 0x5}, 0x240, 0x1ff, 0x2, 0x7, 0x8, 0x9e, 0x4}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) close(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r6) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000140)={0xd7}, 0x4) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd8fdd0f87d725000000000800180041d363b9784ffcac59000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) times(&(0x7f0000000100)) getpeername$qrtr(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/111) 22:12:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) dup(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) io_uring_enter(r3, 0x746f, 0x28c5, 0x1, &(0x7f0000000000)={[0x1]}, 0x8) 22:12:57 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) dup(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:57 executing program 3: socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e21, 0x101, @private1, 0x9}, @in={0x2, 0x4e21, @multicast2}], 0x3c) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:12:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) dup(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:57 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x9, 0x4, 0x80800, r1}) close_range(r2, r3, 0x2) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000040601030000000000000000000000090900020073797a24000010000900020073797a30000000000900020073797a30000000004bde39576ed12f98cb85bd47c2fbe592"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 22:12:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:58 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:58 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0xe, 0x3, 0x7d77, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x10) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) 22:12:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:58 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:58 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xf, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x5}, 0x4) r2 = dup(r0) lsetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'system.', '/dev/cachefiles\x00'}, &(0x7f0000000440)='/dev/cachefiles\x00', 0x10, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x83, "c9ae130942b3aadefde71ea535ea8e32dc69ee584152a2e88f725566b07b44f2e8a85c5f7828f532f8ab167e2f47485848e846537e998a4ff2fb8fa7589c35bcefeac214f8083e687e9d4bf5217f7242ba94e4c3330868045a7ca53d1a1e626a5755ef166a454da7b71eac3b32dd98dc76150d02eded2d2eff7a4d3695c133adca3497"}, &(0x7f0000000380)=0x8b) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10800, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x8001, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000100)=""/164, 0xa4}, &(0x7f00000001c0), 0x36}, 0x20) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000040)={0xff, 0x1f, 0x1}) 22:12:58 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:58 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x10, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={0x28, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2c8, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8cc0}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd684}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa267}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x219}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11d085ca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fff, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x30}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}}}}]}]}, 0x2c8}}, 0x44080) 22:12:58 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 441.305754][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 22:12:58 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x23, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)={0x3, 0x5, 0x1, 0x2, 0x5, [{0x100, 0xdc89, 0x3, [], 0x2004}, {0x7ff, 0x3c0, 0x200, [], 0x100}, {0x6, 0x3ff, 0xfff, [], 0x80}, {0x0, 0xffffffffffffffff, 0x7fff, [], 0x2080}, {0x200, 0x6, 0x0, [], 0x1009}]}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 22:12:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:58 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x73, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:59 executing program 3: r0 = socket$packet(0x11, 0x4, 0x300) syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x200a01) r1 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) fdatasync(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x82080, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x10) 22:12:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:59 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x3, 0x101102) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:12:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x40480) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$dupfd(r4, 0x0, r2) 22:12:59 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xec0, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:59 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) readahead(r1, 0x8, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:59 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x33fe0, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:12:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 5: unshare(0x40600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 22:12:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10001, 0x400080) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4000000004001ff) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:12:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:12:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x20000264, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:00 executing program 5: unshare(0x40600) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:00 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x10) 22:13:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:00 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x7ffff000, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:00 executing program 5: unshare(0x40600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:00 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xfffffdef, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:00 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0xf, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:00 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:00 executing program 2: unshare(0x40600) socket$packet(0x11, 0x2, 0x300) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x402100, 0x1) syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x9, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x8001, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000100)={{0x0, 0x8000, 0x0, 0x5, 0xc0000000000, 0x4c5f, 0x0, 0x5, 0x1000, 0x1, 0x7fffffff, 0x400, 0x200, 0x4, 0x80}, 0x10, [0x0, 0x0]}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) 22:13:00 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:00 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:00 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x10, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:01 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000000c0)=""/155) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r1, 0x0, r4, 0x0, 0x8001, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x10) [ 443.633238][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:13:01 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:01 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:01 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x738, 0x7ff, 0x0, 0x8, 0xffffffff, 0x2, 0x1, 0x8001]}) r1 = fcntl$dupfd(r0, 0x406, r0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x1}, {0x6b, 0x7}, {0x9, 0x3}, {0x81, 0x3}, {0x2, 0x7}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x4}, {0xff, 0x2}, {0x7f, 0x3}, {0x1, 0x7}, {0xff, 0x3}, {0xfa, 0x1}, {0xff, 0x7}, {0x6, 0x4}, {0x45}, {0x50, 0x1}, {0x0, 0x5}], "2d60ba6ce7f75552"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x81, 0x7}, {0x9, 0x5}, {0x81, 0x3}, {0xff, 0x7}, {0x40, 0x3}, {}, {0x8, 0x5}, {0x3e}, {0xff, 0x1}, {0x81}, {0x5, 0x5}, {0x81, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x80, 0x4}, {0x3}], "b18d9ed0b111970b"}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 22:13:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 443.700220][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:13:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x200) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:01 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x23, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:01 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:01 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) 22:13:01 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x73, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:01 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x0, 0x2}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000100)=0xc) 22:13:01 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0xc0, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24da1c38249e8617}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008805}, 0x8005) 22:13:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:02 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 22:13:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0xec0, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:02 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x7cab, &(0x7f0000000000)={0x0, 0x4fea, 0x10, 0x3, 0x381}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:02 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) recvfrom$inet(r1, &(0x7f0000000000)=""/54, 0x36, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000080), 0x4) 22:13:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="e11814cbbad7ed0ef3b9745ee549121f", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x2, 0x6, 0x0) io_setup(0x8, &(0x7f0000000640)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x500}]) r5 = eventfd2(0x2e0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) accept4(r6, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000380)=0x80, 0x800) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x25}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4044000) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x47, r1, &(0x7f0000000040)="da38c608e246a51d618c4960c48223f29b70af7cc44450b2d30a91bf67a6fc86b3d688ae24f532646aceda5146f1228e542c2694d678a2a748c6954c4646943b5494b336e6427bf354a013fd89e00be9a6a0aa396fda7540ecd34c6edc6738879d7ba975da48c2af19a17cbbbec72dd97ea753a7b059035efe988a7647c132137b6b11c8abe9af8ebba4d40793128501a771a4320e0eb8c7de39b53559bd7cc6fcccf0fcaefdf7504a48cd8db160666980578d078877b233f142341a062fc04a34a4240a86c429be505e0759a6a6ac", 0xcf, 0x7e9, 0x0, 0x1, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, r6, &(0x7f0000000180)="ad70337516a91d19ba6d1793584fe19044a0cb8e37dc8013d3f5d583e8e80e493652504786d53f47ba4800d96b808c8965df5656cf55c4fd4331ce4ccc30d0aa8be2c0e115bc65569ac68a2b0c2bce19caf5b474ef9f93", 0x57, 0x200, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, r2, &(0x7f0000000240)="09607dccaf776673711089fdb2e2f9a23d1aa44fd6d068e1ca97b48e70c5c08fc27ba39b39d79dc9301d400e8f2c2135f8", 0x31, 0x9, 0x0, 0x1, r7}]) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:03 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:03 executing program 2: unshare(0x40600) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1ff) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) 22:13:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:03 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x6, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:03 executing program 3: r0 = socket$packet(0x11, 0x4, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0xff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:03 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000980)={{r1}, "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"}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40000400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:03 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x8, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:03 executing program 3: socket$packet(0x11, 0x2, 0x300) socketpair(0x18, 0x800, 0x1, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5820, 0x40) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:03 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x4fd, 0x0, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:04 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x9, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:04 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:04 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xa, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:04 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0xfe, 0xfffffffa, 0x5, @ipv4={[], [], @loopback}, @local, 0x700, 0x7, 0x7, 0xcb57}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:04 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:04 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xe, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:04 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x1a) 22:13:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800400203) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xf, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:05 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x217}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x44004) 22:13:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x10, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:05 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000000009e000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000024001222220001006272696467655f736c617665000000000800058005001c691cb77194f418"], 0x44}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x11, r3, 0x1, 0x1}, 0x14) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x8001, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x8, 0x7, 0x7, 0x0, 0x1000, 0x6b, 0xb61d, 0x4}, 0x20) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x10000, 0x0) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000040)) 22:13:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x5, 0x2a, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r7, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={r7}) 22:13:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)=[0xd76, 0xffff, 0x3, 0x1, 0x3, 0x4, 0x7], &(0x7f00000000c0)=[0x1, 0x0, 0x1000], &(0x7f0000000100)=[0x7, 0x81]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200001, 0x0) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000040)) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x60, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 22:13:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xf0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:06 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = pidfd_getfd(r1, r1, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0xf, 0x4000010, r3, 0x82000000) write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="090000000701000000ce22e540e8a6f33eed9ab6becf0ff05067a13328edcf58279691a5acf46fe2b77fa555393536209c6a0ecc50d075d37b1df128b94dcc065f4bdcc960af7ede6f6bb0a8452c0a28816de9ac151a94f6b82919cc1220f558b7a60211d999e453f75d436d0000000000000000"], 0x9) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:06 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000000)={{r2}, "def6647d9c8f6d9affc28d61e51a3a585bf712416cd691bd4bd45e4fedb60debab53acc2f99fec19cfe791728adb4c42e6d40a8cf8f66e9a397d799a5c9c16cdcce056a357b78f5ea83a788c92e1a92edb99e3554595ac4e30bd0e94789a525dea5787379233dce68a40564efba38db61965f7b6cb7b60756b0b4f9b3b9a4f03dd7cc1ebd09103fea5062fb6656c81dc2d8f1bd183d9949cfac88885b41d4e864c1874765921269c9247d68d0a8c5904fbc3d4112788c81d587262796ac106c3001d1977cb97ef16ec640cc085a43611cb94b4d9bff63bfcb4e5de6742262d1e56dac175031ce169a09f0a73a2dae6ac0ed7c1c6ed1037491ef9a83e465797f48f4fd3f964de9f290711c91fd670339d4ff27783c21198a9f7cee78ebc5e548b0da17898401abeec72135311fbdbc461c83f99902dc609066daca8149e0dae54dfa69ec99780c31f215c6f252fa63a499dc14d38670791353ebe34172848eba26f92158a04993a8cfddc6f3979812e5ca70f35aca1745e0a7c17d85598dc03b1945184514424c1bdde594760308646e4142d547de6ddf25d46987975c1426c5624d1ed68c9ca4afb6a3d26af10950cab03e352917a41100b2650c6b3a07e099b52bb51977dd753e5175d335381c1dae725b5f4e97bf62be54762fb8bbb46e26fe3befe0bd4a3bbd7979d0522ebb46b4eba6cba4c51be5a8114f3eb0906d328bba8cd591585f5fe9d05e41094d086a35bb0046979c5d8265600b62fb73ed944d1f8e01aac439594e846b4629803a8589cc25cb060de0cf77256847b1082a9c02d7e7fb12e85452a899de8836f2897b86009c5094d440d92dbc676d92dfe6808193f023fe9c7d5a190f8cc1f193162a1479a82d48260955686605b2b5cf0866cd9af54d12e4c8e8d2ef20e8a6331e51eea869ede7c47b2bffa3a57f4a4fd465412c56bd0ab35763b9b97be240b566a7148f0082733fd75187ab878d29e4a63f2f6028a1ae4c556289a4b7d9ec2562d3523004a711c12dd4cbff167f86eedd1c4b763e6a0c47a7ff4d1ec771860f83c2310fffe9082e56840b59f1f22b940393ab8672ee3136d785bedc9ea80f5965fd8247f7cde819d4e125710685d7b56d649a478c97b3411b5ee12ba0d77b45b75ea0f66acbad9a27f9248cd251ca5bf30c6ae7684d1b47dc076971160f71dea6955cf053f459e3fbd8f49834526c9c7c08b47b0dcbe6d2ce43699ec8f96af9d3205580cb78502fa5f7f985fe05adc7885edaee9131a149c1e82c99ab46c2738b4e8341949e5fff45594fbda9a222871e03afe90246875fc0bd2e157aa7c234a3790f1d412a337b2c6ac7a59ccd54c54420de0da05922bcc3802155727b14c1f79bf9a063737bb582361a4b223d3379e5adfc974859bb541d39b2a1838c728f533b5d9e4b76487a16ddc3b6965ecd9a2649348e2ed66594c2f63aaf3c6cf324f4ce43e9bb9c05d557d83813d8f9d2074a0fa2adfd0135b59f1332ab443bbdf3c30bd6f596db2f72b3d9b3674b59833fb3ee4cece65b78e7c5d5629e5d34707592a7f811b31d02373d7418a8bfd69fef11324fd9c5f55ca933e5b942d94daf64f6a1b3b4b19568345533a374f1b46d589e104fe382663c8988f47c54cc1785e84d022b00b9a73f9219391d84d15c4eed1f9e266b3cb786a441fde31e35d094bbf294043c39972ad828ee6985730d77b8b5351d0f314fb6a0d5356a54779e607aff589a763af88f3c123be63718383a2d38c536fefd866844ae65253b23c87041dbd4465685301e36800cdd5820cdcc46f49467a44b56399fedd0874f98e71424414ac8350092164cf64aa1b22c6641a954143e7c9b59d85b47d18cfffdc51f44ea9c3fb7450ec2639a5b02491acb2a9b001e82156fa312d76200e87ad8d1691701e4fe4cd5fe79cf7bd13f649088d874194e2e6afff443d9bcec40a740bf2005ec937a37a7be0f318a6956bfd8a0f31cc990f9404c74d68393466f544c7d0a24a74f16aaaf3ff05482ad715eb6967378e4b7f9935dc4ef0b9972ba2384533af5727c8e7a6f969b728d36861770927d00b4b70f02081079f91b927d328eee075ad91ab5d877816f6ca8cebb585a1565e8d9da473ba7dc3241243ec5817ddabbc56bbc06cb8d4d75ad9dee12cedd565f8e557bbd48ad1c8fdee3be12480fe3027fcff3b1a8ce7ed155faa586240cfdbc58451f48788e334ed9dd27a0143d412849355dc491f0171f6a91522caf3d214f04e2e73388010062ef9d5d0c95d59d5a8dc66dacdd8ba81d39a535b78ed9a67b9f6036631d134b934cc5a6707bc183bdcd426d27da06f5c9abb1f4f029a122c67a058f317738dd739e44cd049afb96a4c6189096901b7bf79a5d46bdbabddfacbe12f43c0d062827c629e54bde83271c0620dcd9bca05ffc1c8fb22b69fa24324c27c246546fbc3fdf6836895f551ff763b2786bc0976054df2ccf177ef6fc46a57b18fe483eb41af8512513877fdffda2fb04daf0d2e77e5b8a31b3a6edccc7cb539217438313f1c79b80fc58af7202521259a7f6efc7e4b8bd5d43955577abc7b4dcf2e2f8852fa69b6509fdb27d78abb0ef9573611d7f5115b36eb85c776e510e6c4cb228585bbdcfb69d5077ad731ad9293dc8b82f36f2ec7ab53d63a1e45f222e11f823c547fb0a3c755065fdcabcda386b73af399889976768acd2133d01e170d9c333ef51117d3ee4fdfeb067a116354686760b411df947162f661621b4d4aaa5f6333e43699b45c1968c16e6aea3013101fb7ff793976959dc575bab25445f47c9a0f439b8f8d0697c292a2a1edfa1f9ee027efdca38bee66200582cc104abc8b8457df3e8258c2353fbf120edf481c3ad783f089d95d283ca1de358e26ae49828c5b1e317de445547fa18b24a37e20c86da1e967f0e21a86cfb2c72c709215bb00769c1005b3a8fd2835cc274e26ab57a7467f1c86546cd540318564275f81b4d5fa35e938fdb44dc93083cda1d0537da0fae05e99be2857ab6d72bc8969671ead547fe2ab10ec2b5106611b442d3d6e066f51b32a08050825e12461fdc12a0f9b6ee0365b1378b95fe0a5c626fa612d9da4349e273a9ee122f4db55a9859cd5796e8eaee6b05ecfbbcc0a3e812818831ae5067f8af52c4ab3cf7a656e5161e545d8ebcbd3a17d51b600528ed827c394ecf6a9ffbadf90a0a9eef943fae111932cb761d42974d59d1f8a51e45519b3be4343d08413ed336d133a8bf33d2209ec9d59ff53282e1a116f139f989cf34a14888c1de62c9f9ae4f6c3c54ea0c8e367c4319fdfeb59780fd8ce290254f74e1f3206c38eddf62a976cec9f23d8de0a2e42e8f5042fd88de3d3400cb514750e8ee24de0ed8c5438232995ad3906c2458baedf175a17a983b34ecc9294e224e8d61b2ca00bb77f494182cbc2dc69145b6cf65869ba6a7aa7e02ffc6cdf70f71961207264f29191fffd80d5c6b5aceac583b32260109a900fa55bf92689e73c6127576cdebd7591033409da11fc6162479bc06e65b722514a33a98f7b4708f4089cd8de6184414a2b4a72e9d170a6e6c3f6d2e208c1d2a92e6f8cb0690ba74f4a79f3e1c941699bd6ccff81a69e2f007917f1277a6a3970069c2f82a57623513329a39cd239c9bdcbe0872ac5f3dd9170e424cb27ac7433365d779965b348c067c48fb30e436bd9bf98155b9b394d1083d377114546e7a02c69577efb7e6cf518e2b23372cf6257142fc209cf33645ef79aea017e5dd2d2a8b7c4b5b951b7278ab22d9747083c3130536516f80326f8dfe94cb73da5be607c72764ff31003146b02b27675f00fd64fe812b560943ef1abef5c555b9cf046dfc82e03a367860067667e9481f9cec2e8ba12ceb6aff24f5b0f7cd74f89cd61bd553a6bf556299ed14d0a12228fc0275a6f15cdf178093303a30bb914bc98ba038a2b18aff86b0714609b06812ffc718a5064680512904324c3e7828faff1c76a929909c027c7478493fdf8a6045f65baba6baae713c7853778018f67a6da470f82e1d9b89e1ba0255ddbcecae28c04d4e04c70dd5f945953947bf18737b74177df236640f05301cec616489558331a0e40a4e37139a176e1b53cb1879bfd7d68844261a16b27ae72802707e7abfc6cb79f7b8a035a1a9a8f4ee4cc763261b44108228e184cfb751711ef10451b9ce9f8e95e1672ccee0e43aeeba87ba4c89cba23291f6b75094d808e3c3c43e8f02869095edb3da92acc8b164595ee98a352763687a56298d3db25763c1ce2070917a33f20fd485e6a840bc7a674cd8c0a67088a6c81ad6170229424156faba64e97b78460f1ce5ce2318bc883fb171bc00b17e64a8af1ed4ff26a7c2fc6400441f4fb746caa05218a0ee2450162afc956aa99634ae7f1ef07cf210f576314a9f10692826bb34a5e85de97f840e38f9d8bba746090b57c84aeded247754432f0d38d0d7660c9056ff1cd18c0ee90b2cec83ab73dc2495a958ad49f85520fea5159c95df0ae08557efd9892974c4eb35cde33ca2e38e03d4c1a815e1e02f210e10c214d5664bdc8665d7e488f2234562dbbc95350685994dfc107f1f5e15e77ddfcddcc7c2cf853cfd301e86b8fba9915ba98e02ebe172df4d0b57eb8ad8d9d2bcad3a5dc4c7fa98990b2c4712d79c2a16785891a8e140e4b73d587be3e1b64dc625a501b40cd15ec531c12f17a710b9bed2d60e5880358545c4a970a5c04f5e6dea8c62ab50039e33caa02e6537f4f0e66fe4935df62002fbf5b5ced5723f26ff0b019ae313b60fb220b732cc96b20ac64f591bd9a1babb566993f32ffc1128c0f150bd8c896c80dc7d3a1baca04f424b73e20a68021f1ccb7766015b89595113482f523e7aa5c211ac14da115bab6c598694b3fc967a6701f22f56d6516304060b313169e1540d1a66e16da108a2ac723840071bca4ad1c672b455fd7b88d8a48c909f734d9923555a2bd2da768fa755a65610edece647a7d46810f727766968271375bb8c272478f5f04638524c0ffdf0bdbc76a65cca4fea8c4b48173945f8b606fe83001e0fd5ab6847366b9c02d791d7d7a3bab421f3ad3aa4e2ebe59fcc35736bec1c5ad8220e861dd9f4a9d983954df4dcf18990dbf61213e0335865925093e6a3328c16ab4cb23036224b0fcd7f83b8630df9cd01eb72f899c75116e441b79f2ae68788ee6f261c22d17dcd29726fc5662ba831800324fd1810a093519b3b28c5186427bdb9abb6278675eebbbcee63f0ad99963f13cd1a4042964a7cc2aebb7f314c62b4fb61b3551f5b4bbfad414a4cc1b9aefb079b58b1f437afd5530fb613bc2149fe97feb33f0898655c5ff06cc408e6f1d0af4270f3c91b9533eb8551016334d611210ddcd5e26d345c94d9f703cf50e8cc9ed7e06559506cd202d61408533cb29224737e6e9d8a05028dfb0d742c5e0a1054bac65d2de96bd0a4599aa738e7a1620223f3909c7d31495a485f5d6eeb97e379fa10e6a3d75676bdf302ccd78a12ac083d24fb8c5d7eedeaf23cc7e417334403b89611fc700135628147b5346cbf0ec30a9aafaa810fe9ca40101f607bdd4d97efcbdc722fdba7b5e50b1579c9ebfc30219a251d118703463e892ef51b502d7388812866ad74e9bd57d187b6ad4bc6f64699b0f24d6c89c5de786d39eca2dc58fe81bf66381c4d106acdd3a952861c252337f901467323b75d77b832c8ecc164995a3c9859bbbd8ba22ee769daf8adf57953cc9f35751bd8af81f78bda46c84087e42e48f6633f8dd633e"}) 22:13:06 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x300, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:13:06 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:06 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x40c, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:06 executing program 2: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6}) unshare(0x42050580) r0 = socket$packet(0x11, 0x2, 0x300) lookup_dcookie(0x6, &(0x7f0000000100)=""/159, 0x9f) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f0000000040)={{&(0x7f0000000480)={'Accelerator1\x00', {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {}, {&(0x7f0000000280)=@adf_dec={@normal='NumberDcInstances\x00', {0x7fffffff}}}}}, {&(0x7f0000000400)={'GENERAL\x00'}}}}, 0x50}) dup(r3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x15, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000086e70000000000c8e5674c4176f24375bdb8a37f83a5122dc7fdc4693aee20eb29e613e7ec4fcb97ee508f61b5dbf83e665d2f8466d522107a3b9305cff0d118d4c7818b2d3f1c470b381f316c4a0fadf3778a82fe2e424f4185a6c91afbd413845c519d2b3fbf76d8cb407aa232629bd7719ecfdf031727883604306e62997d1c61c9743bea02448341eaa801227b2227a3b66ffa632308481fe4abb8c9c5a0ac6a1e002d75ef6687f637b6d9592d321e62"]) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) 22:13:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:13:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:06 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x600, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:06 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x3, 0x1, 0xb22, 0xa316, 0x3, 0x5, 0x3f, 0x298c9d4f, 0x0, 0x8000, 0x26, 0x39a, 0x7, 0x60dacee4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 22:13:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) pipe2(&(0x7f0000000000), 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2000a) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:07 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x900, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:13:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:07 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:07 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xa00, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x400, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) r3 = dup(r0) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000100)=0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="0f17b4b55459063987957aad57f9b2a8", 0x10) 22:13:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:07 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xc00, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:08 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="a3e9ce97e1bcd43de7ffb5f4a02d2dab96307b2b06e0a0b3adfbce0914", 0x1d}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2100, 0x0) write$P9_RXATTRWALK(r5, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x8}, 0xf) r6 = dup(r4) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0x40044103, &(0x7f00000000c0)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d1b, &(0x7f0000000000)) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000100)={{0x1, 0x0, @reserved="1db9e0fb77997cb2302b74f4ecc58f347cfdab2d81a7aae89a9a3cec1761aaca"}}) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) 22:13:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:08 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xc04, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:08 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) recvmsg(r2, &(0x7f0000000280)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)}], 0x3}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:08 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xe00, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:08 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$isdn(0x22, 0x3, 0x2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000840}, 0x40081) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, 0x0, 0x0) 22:13:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:08 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x280, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:08 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xf00, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, 0x0, 0x0) 22:13:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:08 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_io_uring_complete(0x0) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000000c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={0x28, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1ac, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9db}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35bf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b0}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x73d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5e6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x810}, 0x44) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="3ae15d5c59efd8fb62582f6e6576e556a06268"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='pipefs\x00', 0x4, 0x0) [ 451.616500][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:13:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:09 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x3f00, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, 0x0, 0x0) 22:13:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:09 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:13:09 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = getgid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r7) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x9}, {}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x7, r1}, {0x8, 0x4, r3}, {0x8, 0x0, r5}, {0x8, 0x8, r7}], {0x10, 0x3}}, 0x64, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind(r8, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3f, @local, 0x4, 0x4}, 0x80) setregid(0xffffffffffffffff, r5) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x10) 22:13:09 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x8, 0x9}, 0xc) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x16, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) 22:13:09 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x5865, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:09 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x2, 0x70bd25, 0x25dfdbfb, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000000) 22:13:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:13:09 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x5b, "cb7393e214e92aa2ce881daeaa669c1c263113cb92d65ba22632812bf52d5681ad61ee92be0d4db026d9bfdbae5865fb62f9b4bb8a08ee6c650dd71fc45e73dcb601524e6dd722dc1895e5d4751381cd943f666e297aebc7b0a000"}, &(0x7f0000000080)=0x63) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x8000, 0xed6f, 0x4, 0x2, 0x2a7178e, 0x20, 0x556, 0x0, r3}, &(0x7f0000000100)=0x20) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:09 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x6000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:13:09 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 22:13:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 2: unshare(0x4000200) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_GET_DUMPABLE(0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x6558, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 22:13:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x8100, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:10 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 22:13:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$security_ima(r2, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="05000f000001ff0089f8434bd6a69a7088bc2b2e619b07e54f2441f9340305e783abe72ffb2e5e5f5aff6d82fb6844ffdf670a5d95d22f5ec05652b5e6734270b92b22e3db2ea4957a69a5c0c41d566449cde45db22b2ab01e870cd6dc80bf691d81f70da027dc2264f028444c1cd8664b1fa9fa757ed6710078b89fae0894355360108219d55779b71f16b8c2b26f5666a80072824813b5e41fb2b7e0cc8680"], 0x92, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00'}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum}) 22:13:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xf000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 22:13:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x34000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:10 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000000) r3 = socket$can_raw(0x1d, 0x3, 0x1) clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$CHAR_RAW_ALIGNOFF(r4, 0x127a, &(0x7f0000000080)) 22:13:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0xc080}, 0x800) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x400300, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:10 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) 22:13:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250500003c0007800c000300020000000000000008000100a90500000c00030000000100000000000c000400f8ffffffffffffff0c00dda1638a6e34dffcaa040007002000000000001800048014000780080001001c002ec055614484ad7bf8372b381fe595d335453adfa9017ee300002c0003800800010002000000080001000600000008000300020000000800030000100000080002000300000000"], 0x94}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) 22:13:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:13:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xf0ffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:11 executing program 2: unshare(0x36010600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x241000, 0x0) ioctl$FIOCLEX(r2, 0x5451) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x1000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:11 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth0\x00', 0x1}, 0x18) 22:13:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200000, 0x170) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000100)={{r3}, 0x0, 0xc, @inherit={0x90, &(0x7f0000000040)={0x1, 0x9, 0x80, 0xfffffffffffffff9, {0x20, 0x5, 0x200, 0xfffffffffffffd36, 0x7}, [0x8, 0x266, 0x8000, 0x85, 0x422594f, 0x4, 0x8, 0x9, 0x5]}}, @name="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"}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:11 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000080)={{{0x6, 0x1}}, 0xe, 0x101, &(0x7f0000000040)="3808c0e369f86b04cf24a7082ea2"}) 22:13:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x3000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x141000, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080000800000fcdb0000010000000000030033000000140009000000000000000b00003d01000000000005000300620000004c40800975a717cf3627dd478727054c3bd67567b0a741fa75749ded46dea32f700e4a0dc549757b1e15c3d10580e7674ee7d7df5974c2a1c71f9365e30a4b30385c07aaf12bdf0f149c35e7c49738b58ad7807991b0b79d0450ba550b2887c7e6716c061b79fac2cce147b818aaa62c39663549a447b2a8ef6087906300"/190], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000040)={{0x7, 0x40}, {0x4, 0x9}, 0x1a27, 0x0, 0x4}) 22:13:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) unshare(0x40600) r2 = socket$packet(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = fcntl$dupfd(r3, 0x0, r0) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f00000000c0)={0x3c, "f554d2f86ed025b4f77116118a1f5fffd48531ccfd388195b21d9d8023b66b7b0d1982b365a85634e4122775c8aa8084c4c2c8b1b227d7f34acd81d488d17925"}) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 22:13:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x4000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:13:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 22:13:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:13:12 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200444}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)={0x23c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffe, @rand_addr=' \x01\x00', 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @remote}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3ff8000, @private2={0xfc, 0x2, [], 0x1}, 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa998}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x582a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0xc8044}, 0x8005) r1 = dup(r0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x321040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r3, &(0x7f0000000080)={0x40, 0x0, 0x4}, &(0x7f00000000c0)=[{}, {}, {}, {}]) signalfd(r2, &(0x7f0000000040)={[0x5]}, 0x8) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 22:13:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x6000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, 0x0, 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 22:13:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208781, 0x20) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x25100, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xfffffecc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = fcntl$dupfd(r2, 0x0, r0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 22:13:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, 0x0, 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:12 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$P9_RWSTAT(r2, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=""/224) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000000000002003) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000009e000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000240012e32fa070b72ffaea06258011000100627269000c00058005001c0000"], 0x44}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESOCT], 0xfffffecc) epoll_pwait(r4, &(0x7f0000000240)=[{}, {}], 0x2, 0x8, &(0x7f0000000140)={[0x9]}, 0x8) 22:13:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x9000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, 0x0, 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xa000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) syncfs(r4) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000000c0)={0x0, 0x4, 0xde4ee9dcd379ab0a, [0x66, 0x3ff, 0xfffffffffffffffd, 0x8, 0x3], [0x6, 0x5, 0x80000001, 0xfff, 0x1, 0x100000000, 0x81, 0x6, 0x81, 0x5287, 0x80, 0x5, 0xff, 0x7, 0x10001, 0x20, 0xffff, 0x6, 0x52c8000000, 0x8, 0xfffffffffffff001, 0x60, 0x1f, 0x7, 0x0, 0x1, 0x0, 0xab22, 0x100000000, 0x7, 0x8, 0x3, 0x80000001, 0x7, 0xffffffffffff9c5d, 0x8, 0x80000000, 0xfffffffffffffff8, 0x5, 0x7fff, 0x3, 0x1ff, 0x10000, 0x3, 0x5, 0x7, 0x1, 0x8, 0x2, 0x3, 0x8001, 0x539, 0x9c, 0x8001, 0x6, 0x6, 0x80000000, 0x7fff, 0x1ff, 0x0, 0x3, 0x3, 0x6, 0x4, 0x8, 0x6, 0x0, 0x1c13, 0x3ff, 0x7, 0x3, 0x7, 0x28ca, 0x3, 0x7, 0x1, 0x1, 0xfffffffffffffbff, 0x6, 0x1000, 0x800, 0x101, 0x9, 0x1000, 0xeee1, 0xfe, 0x8, 0x40, 0x5, 0xd0, 0x9, 0x4, 0x0, 0x101, 0x3, 0x8, 0x5aa, 0x759, 0x4, 0x1, 0x5, 0x8, 0x10001, 0x4, 0xd8, 0x4, 0x1f, 0x5, 0x6, 0x8, 0x81, 0x9, 0x7fffffff, 0x8001, 0x2, 0x3, 0x7, 0x0, 0x2, 0x8db8, 0x400]}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0), 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xc000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:13 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x20]}, 0x8) r1 = signalfd(r0, &(0x7f0000000100)={[0x9]}, 0x8) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040044}, 0x8040) unshare(0x40600) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) memfd_create(&(0x7f0000000040)='%^[%&).\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 22:13:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0), 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xc040000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x801) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0), 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xe000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 2: unshare(0x40600) pipe2(&(0x7f0000000040), 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{0x0}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200), &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000007c0)={0x0, 0x52d}, &(0x7f0000000800)=0x8) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0x800, 0x5, 0x4, 0x100000001, 0xffffffffffffff00, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x1) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x434}}, 0xc0) r2 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004000000000000000000000021000000000068d4000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x87, 0xfa, 0x7f}, {0x3, 0x85, 0x0, 0x1000}, {0x1000, 0x92, 0x4, 0x200}, {0x1ff, 0x3f, 0x1}, {0x7f, 0x6, 0x8, 0x9}]}) 22:13:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:13:13 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xf000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:14 executing program 2: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x800}, &(0x7f0000000080)=0x8) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) 22:13:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{0x0}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:14 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000200)=""/110) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x95, 0x2, 0x1, 0x0, 0x9, 0xc0000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000000), 0xf}, 0x100, 0x2, 0x7, 0x9, 0x1000, 0x9, 0x81}, r4, 0xe, r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000004000000000000000000000004000000000000002dfffff9ffffffff0400"/44], 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x8001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1a) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x10) 22:13:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{0x0}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x3f000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:13:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x60000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:14 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000009e000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005001c"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x64, 0x1d, 0x200, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, r4, 0x1, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={[], 0x26}}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0xffffffdc}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7f}, @NDA_DST_IPV6={0x14, 0x1, @private2}, @NDA_PROBES={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000001000)=""/4096) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x65580000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:15 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2, r3}) 22:13:15 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x8001, 0x6, 0x9}) sendto$l2tp(r2, &(0x7f0000000080)="0ab0e0bf2ce0272699e59bbac99ff96541c6cd189ca0ea0ca0c85986ab6fa989e85b68f12f5f15bbf497226a32eaf305e0c4a0eb4d47723cd21bf38a162b63e506ee940b4f38d711ae94c2d159076866f78f1720e6000c2c8fc9b835bfe799ec161f261ee7179bb22191a5442ac20fd67ddae80c3e7bb44123658e17b9d757e0e9b77db911af05f74452101f47bfb15016199534de27978b416ad380d26f0293ed6d9d5c4a212f4a3c874fafc673d8466a56c19578bceb01fed0c8a84c931638961892d0605f3d7f6ec97fab993d91eaf5294ccd3c47271cf5eaa853425415d00885010ac356183006f3ae2ebf9ffa8f0e98e89dc5b3582a4f15e30763f5595b1bc1a9d0a45d532b37da4c5be750f5bbd84457c9347c5b2467d1f82ab8d3f1d0e2f28325361ba754632864782c0e8a86c3bda10246a0517b713dd12e711dc8477e652c042b51e918b1c5d8c2c9a0cfd4b6d71a317b658f942c61b33b6a7b6934e5674ef93d179993f38d9df4e543697fd966b8c1e04993afd8f0b7508d087e8c01c921d45d7991168d1ad1e4a1fac2ec1a0d46a7ccb935f7253976e42ae1a1ffde49b0df2253310d466c10755400cace03518a82638c101289ce0db106c0266fd31acecfccfbb8db4b36d7e01902027dc6d951c5438c92c538d832f1c1cad0c14f5651645bb7bf0928023cf00bab2eb1903101aabc7e3fd6dd1187328474665ce5cde4e387000a861757ae8db04a4f673c9b98ce93e9f12ef57c00a32dbe7dd7268402341961772444f4d447a61047966858c654cfc60783d74e4d9b82e8c1e83bbfe10395d46d50b70a1ef871d74cbd8145aa7e6125d85d3c4384126de178da8496964712a38b2879c71b7cda63e1abfbb380ea9a2724395b4d1448648fcc51db4258e720f5048847fa5ae93a800d5f50a1b56f1cd0b5643180a4e71005dfc8daaf1996e0a4cae38ce70bd0ec9348998ef66a96e02e80c0d7fea1d05dedede1ee2a70719aff3e32a32e1238731697a44abc270d4b803ddc41da4e90b770e3ec34449362754983d61749f77ab1721ae7dae48b2f8bf3430073fc830e600d3e1b1e2d8e4bccebc97b5d2dc14ea55cbbd0b3a6635da073020857dffffa20c782e57fce6cf82ed1685ff774289ae0bea9730073523f7c417d6d0fec47169bbbe1501c6a628aaae8f60e77867c0d3b7c78d080235ca7b7edffbc669b1181eecb32677f2b154fdcb5500f38899f6b63639c511fdc60cac46dc8f3fa71f2d44fcc34c39e7ed8b705417c8762c0c54057ee158f0e7c449e87727176c51928cc0702c78cc47ca6e0c105e8672909436e88e0d996a0f5e094fb6f38f7453f23764c56c72e00dcefa7ae79c2734e74f38713c76cc647a6eb50bb2daf17225b7e9f40f2a2986e6c918486dd97caf612bff08b7a5cfdf97beb601cab40a9108e2e225b5371f8308ac4ad83bc01896c8471d70f2bdc426da9b0f1d7ddfe524a6bdec70ecccc8eea82762f58594f4e3f2fc018fd234549bfd194b084c096a1372966e964b17ff8c952d7aef63c4aa5704cdd52c1ca6d71811d141e08eabed41ffeb80081a1d95e9d6507e4a8c17417131528c2cc3d326f0317f9a838cde3468b382ccc29e03bc3d621117a2c3c920ce7ceb899e496639c1b65d3a87d0dc553d6af5c482919d7504ef080d973f5c22881e4129aa353c049d16ffb0806996324abad1cb14f00ba5e2c373cf2388697b1bf61bcfeda2d01c3e181c789cfd2b21dc063bd5717e0194709a08d0c46c0b6f6127d45b91f4e51f33a24dcad543c41c94b9bf9d0f56b4337ad1212cb04e68ecd911c5e1ab5a4ec00ee9a21a4dc037dd8880e54cfc5fc0ccb6cdd1b4af1160fa2815ca351dea671164b128fc2b0953590298ec07889e00f798e533409f90897adea2fa3175c7e985adc548262a23a3cbda1f35a3e60ffe58c9e0f69e10ad2661c01e04c5e5d3d728c0500c2a758aacaccf71310488a4f23b23d6f102879a02ddabab3d20c8ad2533c3628608ebba9aaa2f92ee45455c5e67f067eef7e91741b3cd953bc97c4a1e95774ab9837c773b129c392650065d6bb3f74e7bed8bd57a89bad4a198015ec52d93a8d01016000799223b1350bca0ef0a042b938cdcb4c5a14de86a315462d6f28c44d3f157fb7367b103a494cbce7db1570e1059db33ca46bd38e0a81b0ce01e42c8da70d3a3dded40cb492aa707dd2edddde42cf1d9e77cc4d7c96689632c35472582dd678a02e31fe00fce443803edf82dc96169f48602ca3e87e4bf2e6de09f579b350b43ab1a73c1851ff6bce77c8e4a102051fa3c4a94213cb69693d4252354e0140be0925b088dfa85b2a29cb5d0e7b301b01a8f80afbb72c0d6bcf98e283d21f95e910416404219d37be0acb1d8e0dd757ca054f1aeed681a51ec236689d1b9df86850483b3b92543e399d0086bd7b9040f93b8bc53eeb55323d9846be576d8ff6a5a09d34d4da16426150af28fa4c072e3ef30c6160dc4b1aa22daa0b051562b6db919f30c43acfcc2e1d7ebe184527b30a41e0b85f22d5eda07d30ac856be90b3616614f19f0405a826b2d2e1b6980df94d2ef9d36c9b26cd87240b36fa46812a2d0bc382f0bd3ad48af7accf4ff6574962e9640ae43ba1b33947479035e8aea53e111abc79cb973b7361d8b1b0845b837430742c39a3306a358ce66630545df099c7c4cb896e290667509ae305099f257cdaba60d2c3186019b40176f9e3de0b036382298bb30b6ee7b492736b7dc189d80be2c93a839fab55664a7721070799107c3f10e4915e2a5044fd57806fca7cace6d4a1b87f0b17bab2a05877f23e9ebc40883d94e34e081604a832e67960997d27b57e8a7e7a115b58ce6505bdac2d7e89505904430a0df89acb18af493f32af6cd798381d1936e1775f26ab17dee26bc6aa34ac5223bc45bbca4934343a662dfb20f9a32705546d44468bb1c6ae1e00e64124e6bd47c7ac812826da872345efce59bbed2201adbb8d73e1a3315e42bcda9a67bf89077020eaae45a09fc3d27f74de43ad21e6a42b91a4919c31580f5151814f75645a4847546ab45a6d5637e8069cac84eff79c32ac97b075e27119285ffa9a709117507407bc2f405b4dd291163db0a1607229ccd843fa1e90791534f28fa45e5a7a4c82d1f494975168f1d56b00505d9b37e20e75784247946bbb0ef7ff529c4e31ada47093980b79a2491e4ce033b065ca0af1a43cd564dfc7f19d9377f7986dea5ace0d21bf428b2a4c7270384dc11ea4f6316f249cc27ecfb437332080bd7c00b316e9e326efbf1762ab282a98fa0f760d30a1a1412233ae947ff1486e9b075d1a6f6fc3fb4c34aa8d4ed6fc5ef998577aa24d41797cf5e4dc5fe2da9d58d9f4e385977f08342e620260b8509c950e530f433bb2f5043143254894767d47b2ca1d570e735b29aa3aa53e5b24edda9c21d16c429b550adb878343ab898d59cfc48293df7bd7b6cd2be4029c5aeed6125440a7bb97f217ff008be3abd2b78c48abe58ba59a047e6a23fd55a92ec9478ec4bfc9693834f8f541f2c99a2689ce86a19f4299687d5bd6c9e885c968c215b4ae4b61a5f78d7be984b5bca0667be6bbc4a1bf841798532669a00d705cb27b28094fb1088452c64a144ab8b1811cef1f49054b2eb6a4fc9cfb7cab1bd4d90fc893cb75b7425b291e4dd3b32355cf7c48079c01e8e487ba82cd2bcc257fc2dd0528a8633dd4d9a8e8522916af3ff0a203a650157d65e0c2bc389449377b12ba7210e66ad4ce2a201310ddc91afd0cfec8ca98cb1d74e7394ea77110698e29945d072751ad8a3521d7b83b8b8f700bab2263ce62947965dc2e1177519d5776bf6b6d701007c12f09050fd8be9d040a67dd82853b46014881dbd17000b1ff7fd972fcd77730373635d679754ed6e8942da1c70c14342d92925f3d2a095636bb79c612d43bda49de5fdcfff2488053d9532d0522531dd547e8c9bc15dbea6117ec68d5918a038e2638dc3b9ea29d14ab0cf5648c21b5ad1ba42f3be9a5c901deb81701478ab3710e396857fa749a6e61273166483c095f4dc4db676c10a36706253642f9304ece496782846abf442d0830c75fe6b594ed1764d324d4a94efcf11f46f9d7cf3a1a286f92706fc769b8389ebb2527c04e0badd94775cbf5f3a3f70c64c60b4a7c5ea72ae7e3177258c82920f16766972598c679dc65070287de79a402ad161ba41df65bc10a615a2c2ab050b44ef3079f10054d7b1770911f39a918baecd5b0ee4b1579d5011a14772f4722938043e5fa8b60d0707bb7c063c4c3305f73335eaf89286e19d270d582e3808b3e48a6b3b7b1f0ab7bb0f28e936f29fba77dacedeb1ffd36e9459fb1ae91fd50984e61372407fc905cc98147d1666c39d1a53df569ea9600f621f583dc42d05569b643e0f320dcd4f350ddc3dd6c8425d58cd7fe3386cb374991140c771f5dc1f9e8028d47d7216fd13291eb0bf698203a0710ff39e7a351892ded863a5bdc10685c350685df16c55b1f1b8b9c42c7f122769aef02a934cc271b38ef5bb3103f13f0d7e42ef41929e803bf4cf22ba53e59a9da946c0f41aecbf57ba64278807d4a52b2837194d0a284554398d54ed522619ab9c7c5b930186e48e08b9e2c2861e353b7e325d584541156217392a0c39439cae1f1603fad4898abf737407f6fe5a41dd5c7c80565567f81240e3d09a2ebf8ae58be74d6cb05ab547f9f92adc7077e2cb8f2ef2391d908694651b11e6b604d6fc5a17e5a3dc309c208583075840df0ddb96212fc7ce54e202b5bba97bc96783df22e2ac180a9d4e5995e17b6bfb12af7dff5c37b6f84e36f6cfe6d8efbb6a78b62061b7e0ffd9b7fe52effb7039d94b628c69c459bd28d62c3a6981913e321afe6f87784188f1d5583b5ea0d6a09676ab2944e506e1023832bdc5661e846721d3116b2686babbe52b2f36a0a5c6c9e305f6f81736414d3a0aeca933397d7772211fc9da9f47312f41cad510ddd9057996b07d36392879e2a3ed42f85389d27ee9e2431ccf06c4738c88a4bcbc1b4fba052178a26a979bd9fbe7f15ba136282ba3989d5be613650e0eb4038ed5a573aeba5f7de7a14361d1bf59ec93bc681f443eda74df4ad76ea127dcd80f840fee09145b02cef2abe3ec1927c2cf3b5e381343c68fb4b5a96c7bef5be3f4b22eadf2ef1a9e02b6d0c5ac7743ccd41a2673ed7e5cb05c0a258da83110b905adf83f508b2860e080e5cb72cb7b6856be0e532d2bb82b13256820482f6afe9787e7d997580da2944691bdffb1961227e233f964f58f62b0997b7a1378f92eba423d23e84aa88edd3c83cee403dcefa022a9673af3f894734c4ed42b126d9166f53f023bc2897cba47f5f823e7fa8e0290f0006f2887da1183fb992c7199a973fb44c9dffd2bd285af6e87ff675baa5f0fa2b5ed644ce16dbd5657f3935f0f796376dc5454dbb2eb650e58b9489b09f1e0fcbf1f4b36ba11e82728efd9783baf1ada9d5bc37137cc258cecd0b96106e448c7ab9d282b5efda27b36a35f8e2eb8ce959f1570bf46e60a1da27ebbd32b7e2371b8937dd6670bb311860da5716ea84591093e7dac4fea7a9aab210e4d229fbcb2cf3baaa20e04bdb182ecf84f82c1969e1c2fc44ce7f2e2794a22fdeb147a60ee6bb8ba3bb9ba9fe3df179593117e22f5e3766352c619a9e7b170e35fd21e75acb5da08ab5f6fdc163acc37f3d860d9fcf4cac75dbded31752500657cee22a5275a00aa4902be4239ca505f469a65a22667ac996c6de1f2", 0x1000, 0x40, &(0x7f0000001080)={0x2, 0x0, @multicast2, 0x3}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) r4 = dup(r1) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000000)={0xffffffff, 0x7817}) 22:13:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:15 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x81000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:15 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = dup(r0) membarrier(0x10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:13:15 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="e10300000c00000008006d0500003f0000000000"]) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x81, 0x8, 0x19, @private1={0xfc, 0x1, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, 0x80, 0x700, 0x2af, 0x7}}) semctl$GETNCNT(0xffffffffffffffff, 0x2, 0xe, &(0x7f00000001c0)=""/131) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000002c0)=""/185) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1800004ebcdc83cd7b739f13dc9e0d1dc988e360b7aad43887be147d7f5e6b1a9c"]) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7, 0x8001}, 0x8) 22:13:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:15 executing program 2: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) unshare(0x40600) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000140)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) 22:13:15 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:15 executing program 2: unshare(0x40600) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'veth0_to_bond\x00'}) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x3c, 0x18}, {0x9, 0xd0}, 0x9, 0x6, 0x7f}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) 22:13:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:15 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 22:13:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:16 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xf, 0x8, 0x9}) 22:13:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:16 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0xa, 0x3, 0x7, &(0x7f00000002c0)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) clone3(&(0x7f0000000240)={0x20000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x1b}, &(0x7f00000000c0)=""/67, 0x43, &(0x7f0000000140)=""/188, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, {r1}}, 0x58) fcntl$setown(r0, 0x8, r3) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:16 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000001c0)={0xd000, 0xd000, 0x2, 0x62}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)={'syz1', "029f83fac491cef9b140d915f4f0e072f40cf12edc070b68237a3ec309841f5ed2d0699a69e04cd7b87b382de0d5f61c00672a2bdf313e52d655927e69c20ce2b1985741fe343cf855032308255a2eeb9d98ad3451726ea892aa432196bc44e183511961d748363beea70003ed220ed0605024cfbfca904681d499d8c76e64c25fecf322762938736f14284bf60235b08d80da7f04a052b37b53fa91447ca46129691b380eddcbff3f87497a2eef4b3b171e47a7efeac06a92cb97ccb31be126c11cea733afa5f93473cb5d388f4376444542df45b9333452f97"}, 0xde) close(r3) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8c, 0x3, {"1d5d561d326a62f4ecf42c13c40e3312"}, 0x8, 0x4, 0x3ff}}}, 0xa0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x24000000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) 22:13:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 22:13:17 executing program 3: r0 = dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x8, 0x0, 0x80, 0x3, 0x0, 0x7, 0x2530, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x8}, 0x2818, 0x101, 0x8, 0x6, 0x0, 0x3, 0x9}, r0, 0x1, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="b0013d7c2a92c8d7e13df41758ca92543ce3db24936b2a35ff0000000000000000000000c171ca8bc2a410e4db87cd069b97772cbd7c9e84ecef11ff92c0a2b4e56ed814a193e47055c48dd3a9ad1d5456e6ab153ff28ab47051051d99dd6771a1145fae91e024b1a24d0cb731cc060bedc3f6f2aef6b2fc4c06c6d7623a1df915eb99714cbc6c1b957914c685112c7ba1a0365f7579ebe4476a8a41bb88ec026fb70ba03da0160841414bcf76be2ea2f9ddc5f7c977a6c1d69628bd92d7f72fbfecdb0910ac6912d5c5008dcc187acba3da8c2efce7a7db9ef53192bbd42dbcb2a8828eb6d10e9c850ee931ba460000000000000000"], &(0x7f0000000280)=0x38) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000200)={0x13}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) socket$pppoe(0x18, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_mr_cache\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x8001, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0x11d) write$P9_RFLUSH(r5, &(0x7f00000001c0)={0x7, 0x6d, 0x2}, 0x7) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x8000, 0x2}) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x10) 22:13:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:17 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$CHAR_RAW_BSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$ppp(r2, &(0x7f0000000040)="74ee7d60078dba647ca912be1dbd3fd7c6020272218cdf71a096496f096bb0cc9fdd677dec678a30597a6f79e39287eb6bb2982aef90407981b35f38891906f18b99e54da6429103bf3c3135a4cefdc1b297282c29ca2067b246650814c693264dccbdb5eb698c9c5ec8189985400037b9063a75521c6d155aebcafec3cb", 0x7e) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) 22:13:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:17 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCFLSH(r4, 0x540b, 0x2) 22:13:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 22:13:18 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:18 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:13:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:18 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @ioapic={0x3000, 0x8, 0x7, 0x0, 0x0, [{0x3, 0x40, 0x3, [], 0x8}, {0x3, 0x5, 0xff, [], 0x40}, {0x81, 0x9f}, {0x9, 0x5, 0x4, [], 0x9}, {0x2, 0x0, 0x80}, {0x0, 0x1, 0x9, [], 0x81}, {0xf, 0x40, 0x8, [], 0x81}, {0x4, 0x6, 0x1f, [], 0x20}, {0x7, 0x1, 0xff, [], 0x3}, {0x4, 0x8, 0x20, [], 0x1}, {0xb, 0xfc, 0x40, [], 0x8}, {0x0, 0x7f, 0x1, [], 0x8}, {0x8f, 0x20, 0xff, [], 0x3}, {0x0, 0x87, 0x1, [], 0x7f}, {0x2, 0x7, 0x0, [], 0xff}, {0x0, 0x8, 0x40, [], 0x3f}, {0x1, 0x9, 0x0, [], 0x2}, {0xe0, 0x3, 0x7f, [], 0xc1}, {0x5, 0x9b, 0x9, [], 0x26}, {0x3, 0x12, 0x4, [], 0x2e}, {0x7, 0x1f, 0x5, [], 0x9f}, {0xfe, 0x11, 0x3, [], 0x1}, {0x1f, 0x80, 0x1f, [], 0x1}, {0x1, 0x3, 0x1, [], 0x40}]}}) 22:13:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:18 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400000, 0x0) socket(0x11, 0x4, 0xffffffff) 22:13:19 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x42000, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:19 executing program 0 (fault-call:7 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:19 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000004c0)={0x3, 0x8}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000000), {[{{@arp={@rand_addr=0x64010102, @loopback, 0xffffffff, 0x0, 0xe, 0xc, {@mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x361f, 0x4, 0x0, 0x5, 0x9, 0xff01, 'batadv_slave_1\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast1, @rand_addr=0x64010101, 0x2, 0xffffffff}}}, {{@arp={@empty, @multicast2, 0xffffffff, 0x0, 0x10, 0xf, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x8, 0x5, 0x0, 0x4, 0x0, 'veth1_to_hsr\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x0, 0x331}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @remote, 0x5a434a3f11c409d3}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 0x6, 0x2, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="e8d395fd605a", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x800, 0x9, 0xfffc, 0x5, 0x4, 0x3, 'bond0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, 0x8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x10) 22:13:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 462.116435][T17907] xt_check_table_hooks: 5 callbacks suppressed [ 462.116445][T17907] x_tables: duplicate underflow at hook 1 22:13:19 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000040)) [ 462.170682][T17907] x_tables: duplicate underflow at hook 1 [ 462.185855][T17914] FAULT_INJECTION: forcing a failure. [ 462.185855][T17914] name failslab, interval 1, probability 0, space 0, times 0 22:13:19 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) [ 462.287236][T17914] CPU: 0 PID: 17914 Comm: syz-executor.0 Not tainted 5.9.0-rc7-syzkaller #0 [ 462.295945][T17914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.306007][T17914] Call Trace: [ 462.309315][T17914] dump_stack+0x198/0x1fd [ 462.313664][T17914] should_fail.cold+0x5/0x14 [ 462.318273][T17914] ? do_sys_poll+0x270/0xd40 [ 462.322877][T17914] should_failslab+0x5/0xf [ 462.327304][T17914] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 462.333422][T17914] __kmalloc+0x6f/0x360 22:13:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 462.337600][T17914] ? __might_fault+0x190/0x1d0 [ 462.342389][T17914] do_sys_poll+0x270/0xd40 [ 462.346896][T17914] ? is_bpf_text_address+0xcb/0x160 [ 462.352111][T17914] ? compat_core_sys_select+0x7c0/0x7c0 [ 462.357670][T17914] ? mark_lock+0x82/0x1660 [ 462.362123][T17914] ? mark_lock+0x82/0x1660 [ 462.366562][T17914] ? __lock_acquire+0xb92/0x5780 [ 462.371523][T17914] ? lock_downgrade+0x830/0x830 [ 462.377346][T17914] ? _parse_integer+0x132/0x180 22:13:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 462.382218][T17914] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 462.388216][T17914] ? _kstrtoull+0x186/0x420 [ 462.393009][T17914] ? lock_is_held_type+0xbb/0xf0 [ 462.397985][T17914] ? find_held_lock+0x2d/0x110 [ 462.402765][T17914] ? lock_is_held_type+0xbb/0xf0 [ 462.407722][T17914] ? find_held_lock+0x2d/0x110 [ 462.412506][T17914] ? ksys_write+0x212/0x250 [ 462.417022][T17914] ? lock_downgrade+0x830/0x830 [ 462.421880][T17914] ? vfs_write+0x397/0x730 [ 462.426316][T17914] ? lock_downgrade+0x830/0x830 [ 462.431257][T17914] ? get_pid_task+0x138/0x200 [ 462.436032][T17914] ? set_user_sigmask+0x211/0x2a0 [ 462.441085][T17914] ? __mutex_unlock_slowpath+0xe2/0x610 [ 462.446647][T17914] ? __set_current_blocked+0x110/0x110 [ 462.452125][T17914] ? wait_for_completion+0x260/0x260 [ 462.457436][T17914] __x64_sys_ppoll+0x210/0x280 [ 462.462218][T17914] ? fput_many+0x2f/0x1a0 [ 462.466588][T17914] ? __ia32_sys_poll+0x440/0x440 [ 462.471530][T17914] ? lock_is_held_type+0xbb/0xf0 [ 462.476478][T17914] ? syscall_enter_from_user_mode+0x1d/0x60 [ 462.482393][T17914] ? check_preemption_disabled+0x50/0x130 [ 462.488126][T17914] ? syscall_enter_from_user_mode+0x1d/0x60 [ 462.494298][T17914] do_syscall_64+0x2d/0x70 [ 462.498725][T17914] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 462.504620][T17914] RIP: 0033:0x45de89 [ 462.508519][T17914] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.528153][T17914] RSP: 002b:00007fc0e26c3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 462.536575][T17914] RAX: ffffffffffffffda RBX: 0000000000025040 RCX: 000000000045de89 [ 462.544553][T17914] RDX: 0000000000000000 RSI: 20000000000000c3 RDI: 00000000200000c0 [ 462.552556][T17914] RBP: 00007fc0e26c3ca0 R08: ffffffffffffff34 R09: 0000000000000000 [ 462.560550][T17914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.568528][T17914] R13: 000000000169fb6f R14: 00007fc0e26c49c0 R15: 000000000118bf2c 22:13:20 executing program 0 (fault-call:7 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="8396da7235b3502295c86b62089186573c2715fe35ee7039030ae2b11352f4c4f95bbecd0b6e47af18ae969483c066591fb6fbc19ffd6f198fcbf2b7eba2dcd1e1d7961f6c956ba81041a3", 0x4b}, {&(0x7f00000000c0)="09f7fbaef2ffe9cb25f218e767d0cb1a52bb207a65a4098fffed849757a14db4c84016ad187f5bbdc0fc0d11", 0x2c}], 0x2, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x54a6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x68}, 0x24040010) 22:13:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x6, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f0000000000)="024b62a243ea5efaf6de913ec1b8f65aa98df1569fa8deb2849ca461b221f670d1a1af9d9a4ae38bd9ccc8111af5ce526b44f11169c937745c600559637ba39565cbb3bc09bb541bfdd2332b7b617c1b365d21ab429560f4e3e8783b29536fbb5da57629ab06eab56a2a34fc0a1ceb6a72343c778a33946ef5c0e63e87ad472ad9581e080444edf3a903aaeee3c6d1efaa950ced07f5ab3c86c232b81b67e8925646b6ef76c2089c647be9ea214e366e2a20d60045fa61497e6cfac5056ef2164c8a206fb4aed7", 0xc7, 0x0, &(0x7f0000000100)={0x11, 0xfc, 0x0, 0x1, 0x1, 0x6, @dev={[], 0x15}}, 0x14) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000180)=0xfffffffffffffffc) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:20 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xd0000000, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x8, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getdents(0xffffffffffffff9c, &(0x7f0000000000)=""/16, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20800, 0x0) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f00000001c0)) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000040)={[0x100000, 0x1, 0x4000, 0x100000], 0x5, 0x48, 0x8}) setsockopt$inet_dccp_buf(r1, 0x21, 0x41, &(0x7f00000000c0)="7126d72d3b8c4fbbaee2764d42d9071f5c3ecfaaeb4637318f21923e667ee8f651408e5acb7c6a1b67f3c166376ff9fa269309c256a27ec6d8862eebfca9a72259a4f0e980f1c9ee3b262723020399a1643f34be07d5103a480fe17c57543a9ec2a610d0707cc3c05c79ad885826a7455ee132345a708f6f9b2bc355a6fbfdf99bca4b96555ebe0d272eb45b9377df38ebd93050bdc09d2aaffbb567", 0x9c) 22:13:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 2: unshare(0x45cecfe56237c000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 22:13:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x9, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:20 executing program 2: unshare(0x40600) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40080, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x3f, 0x2b, 0x10001, 0x46, @loopback, @private0={0xfc, 0x0, [], 0xfe}, 0x7, 0x80, 0x3ff, 0x1ff}}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xa, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x8000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r7, 0xffffffffffffffff}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000440) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 22:13:21 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) process_vm_readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/123, 0x7b}, {&(0x7f0000000600)=""/231, 0xe7}], 0x4, &(0x7f0000001c40)=[{&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f0000000840)=""/114, 0x72}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/227, 0xe3}, {&(0x7f00000008c0)=""/38, 0x26}, {&(0x7f0000000900)=""/43, 0x2b}, {&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000001b80)=""/155, 0x9b}], 0x8, 0x0) setns(r1, 0x2000000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x1, 0x3, [0xfffa, 0x22, 0xfff]}, &(0x7f0000000480)=0xe) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x6, {{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x0, 0x7, [{{0x2, 0x4e24, @empty}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @private=0xa010101}}]}, 0x410) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x2, 0x9, 0x71}, 0x8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)=0x4) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$getregs(0xb, r3, 0x40, &(0x7f0000000080)=""/179) r4 = memfd_create(&(0x7f0000000040)='dummy0\x00', 0x0) r5 = geteuid() r6 = geteuid() fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) keyctl$chown(0x4, 0x0, r6, 0xffffffffffffffff) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) 22:13:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:13:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x10) 22:13:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x10}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 2: unshare(0x60050600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x87) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="9f6c8b14adceb4d51fdf6a934df3d9b9ea02c1d5b3bb3c65faff65be26d59e65161d0a204e615d3764dc8a6f6edb4f956e7e43716e20", 0x36}, {&(0x7f0000000040)="b84c4d6c99230b82504f2106addf407ceab906176e16a08940b1ef62b13a4edb704acd18a962a86656c74636ca09047901eb160666129cedc2f09e93ff0aabea9875b358f725e70d69f70e0cd2572f9253567849cf240000000000007f7ed6e04587d66533133e43da80a59eaa741d2cad4a5e937dbf133953dcdc9cadd6da91f740c11a1c", 0x85}, {&(0x7f0000000480)="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", 0x168}, {&(0x7f0000000100)="993001776c34deceeed210b6ed16665e8a648388bff23ffc02c4b049e9f23b72dce3586c32b1c9b21e9f9c5e977a0e3da5407a32b678a874857d19e8c116818120471bea9dfd078839b9ca33351b5311a88619474ecc10173dbe66ecd2842dd37d9f40aa0956c073a1c6fd370c6316e0d13855c92c0e6906b908760da89076c6fb189465b79f145f8a5725d52ce20aba769fdd89b5b4cb71306ae58befc2e86340375a0046f826bce521234b832e0f6bb463e08b0ed977979f0d23c148b23fb3", 0xc0}, {&(0x7f0000000600)="6fa4834726e70cf26549b966330c071283b30a2f7389c06d7dec47e60093a2c956f978b7659ce17c4e5d087de1483e855551fc21c96a5acd66e606e906eb2a684a54a7af4d5a084fa82c005368ea6e32f76c167bc7082bef0836307fba868153eb87d0c2c7da986ba476ba03c9a0e6d3974c79a1566d90cf5107965bfd49519413f9649ef62e4cd54455cf0cd2d6c9eb3421d8ffc725bf56461bc793a3a8c08a9bec220bb7f3a87a7167cdee16f3a6c376edf9fa30f06737e9a7b2bff99c942dd61ff679bb4d7f44aecb357c98c33473d6868cc094941e29175a5f588c81419c881b30f87a8179ddea35d19c37d0a3d0c75b46e0dd82cf1fdd4918550eb82efaae9f9ed937567f73c7", 0x109}, {&(0x7f0000000340)="2b6fa3148bb692862bab009b1ef9883da2abb462ef4189e7742876728c872825cea2bf158860e66eb0a189f3238fc550c4a99db32bb91c5e6c9737b9b263c3fbfb90542707afec823b66b28addf3c93be095a69cffb0576cec85ab07c0f60344d64be35bf4b5a23ae51a8e1e18164c91bd3ce66e81cb03a1d9d6beba7210f91ef91af0537b4fc5a88fb5b82fc914af23bec083e62ff84100c546b42508391e82abfd60", 0xa3}], 0x6, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xf, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:21 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x22, 0x7, 0x4, 0x0, 0x9, {}, {0x5, 0x0, 0x40, 0x20, 0x8, 0x9, "1056f30f"}, 0x0, 0x4, @userptr=0x10000, 0x7ff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:21 executing program 2: ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:21 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x10, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:13:22 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:22 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:22 executing program 2: sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xe8, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x861}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0xe8}}, 0x20008004) unshare(0x40600) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200120, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x3, 0x2, 0x4, 0x40, 0x6, {0x77359400}, {0x5, 0x8, 0x80, 0x1, 0x8, 0x0, "6237ede3"}, 0x1a, 0x1, @userptr=0x4, 0xffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000000)) 22:13:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x60, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x2}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:22 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xf0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:22 executing program 2: unshare(0x20010300) r0 = socket$packet(0x11, 0x1, 0x300) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000002640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002600)={&(0x7f0000000080)={0x255c, 0x0, 0x13579af88bc19e29, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, [@beacon=[@NL80211_ATTR_PROBE_RESP={0x40d, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x24, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x16, 0x3, "ade5b16bf91e1f35363942a80da2fa7d9017"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1cb, 0x80, [@random={0x4c, 0x76, "f4ddd6fdb1083d8ca18718ef3b29ef6ba96ac24787c0bbf59b44db5531f0bbbb277ba78c15941d0056628109f9fe120a7ff1568162b7a0e59c9566c0e19e14ac6878b88bbe372486064658f3540cceb1b0b65988b9e69c3cd7ab616d78b53ef7c4793f4c2b12cf0e7c6c8781339e12087948264b5ed7"}, @random={0xfb, 0xdf, "9ab0303210ff9395506a0641e8c49f9051f8d782deeee91bcae13de0471943cbbfb0761e0eda8fe177e11cbfd6f2957edef917cb93b1d43ff115aa89eebf065796a9b5c56e7ca22daaf185bbaac0e980632c19230fb97af89a7b456790ded1fd9fbe12502dde2407f90ca7d0d112d24eaf6c77e56af9915319184dfe79007c760d82d5393ed98cc9010e72d4f512de0b269893cfce4a60b67b4c0eab7b9c947cb4775a8ffacdd6eaf12ac1b9e508fadb9ffd3f85b301a647d31e754cbba3e294d8e265adc6d3a4df1b0b584658cd3d4a06d57f8c66254eb6528ed12267beed"}, @random={0xff, 0x6c, "14af4e9448abf8b277f2f5b69fdef658b6d75e61857cc75e04c3a300fbba7050ff4bbcc23a1dbcc97bdf6a0938860f57f3d94833cd248a2baa08063d2c37909f75c024102b1bed04cce7194a83c165b242273974151e4aee6577c163bd90ff2b4e3d66b101c55c50e6674ead"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x534, 0x7f, [@random={0x2, 0x7c, "7e45fad74ad176b210f602567fe2ffc3855c7264668985cd0a8096b0d8d43abfddf330f92f5a344646e9098c28726c25ae5a0ae5e9c0b24a207062710b1ddd3015c4dad5d1e62598bd298145e8ad957ac430071993feccbc3675209cad07557567ddf83508e57b378e82f317d286212b898f320432a6e2b0f0a554b3"}, @random={0x7f, 0xd9, "a7c05d90ad58e2bd76eba1cb046ec5c301c1459f0a506f269f3f8c8712b7f5407862afd6716b046e1ddf677a43e6974fd710e1e9d06ea29674543a168f903ecd684a48e516e57ddbe4b464efa37904e3f10ced766307ef942c50f8f9e858002eed3475c64b7d8e67703ac34f00fd998218711b01464bb1f68e61e6fae3fd993151aa75bd34fa99e7f1386b6861c4b888b1becb53c2c207f5000d9d143de94582485bc0a0ff75a9f0a0cd70b132210edae322054c409f35dd37daa15188b4d76e7b5d0a0af0c69e2440ecea8fbc7550164db5768f272104fbfe"}, @random={0xff, 0xcf, "09c3d00825ecbf6ff830124d56e3f4370bf9009aa7bf5f0516593312a47ad7c2cfb17a4cd3b27bc79e25dd276685235cf20d61cf3d4d70b877b6f698867ce7ca3f7ba94dafac534133cee6d66b8d3305916a494d6a1be4b30b5a5ff2ef9630de1e33d7442222db7988cde11e0ff0cf09351f699921f4eefedd1921a070f7a05b82be0e00a10b1f46ae98c74f59e4c493d64cc844ed6c33ddc44abb6ee982642dde3b63087b716ecbef326a0df0252af3a98a5885c592fa3ea895985457fd71e2db7eddaf0bc2e826e797ff4ff8c470"}, @random={0x9, 0x18, "8fd36fc32039282189b74e06fc86c49f284e80b3c4992099"}, @random={0x81, 0xe4, "660747c7c95eac78e6a60303be831fca4d9e89ab09d91e65b99ca543e5cab3a0f15f6c819c2ade4098217307cc6eb910fb43f3c5ef9b472540bc982a03c83fa274f6c34cff434cde38f50f65b712a1c0904af46543b35cebdc29b1a32514303a68d7cb51a21cb6f8a93ccf6f96a474e50f8c05d5a087d532d272baf09f604adb6325bbc6d04e60b68e0127100c95ba024cdee4a2323c3f66d32d35a0e198a658668d07c8bb949b0442513661ccd3ae21abe10b45fa644dfe4cdef97dd0ab855b7f7138763b6d0f0a8e0833697af6eae222997c4664ebe745e36d72db5cbae10f40982d3c"}, @random={0xff, 0x19, "6790d1084539aa4322cf03fffc8be7aa990c4c1ae415449557"}, @random={0x6, 0x28, "93a81f8ff88594b16e3aed9c04115b975db49321d206c97a1ddb638c4511567be5c2003950a3a277"}, @random={0x20, 0xc4, "d2b26f22f9a538ebdfe1d916ee57fc18c50d110175d273003df00d2810fbd9c0b685c30312bc20bbe44e9d63950c614cb52daf45da27aff944e48fce9cbace19223180ac625687ad1f456d6b67ff70b98a8c41e92d406d185e3f7480c50d70f8e5646189fc7cba0f20dde1f322cb753e3cf994fcc026054d90bb524680df08809ed1a176d98381d590001c584934523d9d81284544a22e732729285878d40303c20a73e6c06da554e40f7efba2697ad690f11101c01083a8f632f163b0deb14b40f2c89d"}, @random={0x5, 0xf9, "b399cc76590b093f373fe28e340a7a226fb4bd2cfd778d6a6870304ceaf85eed37432f5c038ce5429bfe313b9bfce25da029eaa8e23961712c5ac526dc54c34a0abc40f4896cd20924ad513821d7829849d2be035f8cd66fadeeb8190340ae9048da49784a618e9d217875bd602734671635fec0b936cada241bc0d06c4bb1fe88acb5110de8201cf488974346494935ab0973677dd68b84350b786327c4f78622859dbaed4aa714e6e758e4c0c402f6245d334c0a8d9cb1b2b9cf421dff52f6ba65ee95867371294c0c55f38f81a07da3259778f8645176a6fb31309b3835be127b21e1e8653cb0262640d38984f116a2fbcf08de58aca69c"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1080, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x16, 0x2, "d189925786ed2cead66e3c2c884b197e0e18"}, @NL80211_FTM_RESP_ATTR_LCI={0x53, 0x2, "41cdeac19e85710c51d756a943db7851ae539ebfc65519ce4784c78940b91f7a7bb076c0cbcffcc531fbf3ee1be4a594fc5dc522673c6de416095ad99eb06860595c962049078fc0dd7bde9358126b"}, @NL80211_FTM_RESP_ATTR_LCI={0xc, 0x2, "510a27a58fdc991c"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x3f6, 0x7f, [@random={0x0, 0x49, "99949ed93a934638aa9e07e197798674a34daeab82d226fa30a479b0d1f63c523beddbb7f633c0590b36dab27c4c1e07557a76c1a13cb6ebd70289d142b6de2f42c941645849d26d94"}, @random={0x34, 0xb1, "5ccde7ff0318987c74c07bfacc2e5a5008cb05f74b16fba74bf328515281ddd7a17167d83a56184e8195a7cdc31432e2d2d7996f979f12d6a348d44e712620ebb59ef1cd54a35a1b64cf157d550433c11b82cbcd723541291a9adb0a15efa1fb4402611a4e498b616156a4e82400aae66ad89e637365466bcf2191fdd4d69dae89db43f35296cb816252cc526d3a0ee99521ee7f2caf91d5111df49370af8a9706c504e32f27e8257b7b90b44b35dcb8d2"}, @random={0x50, 0x5d, "c985a7f32614869dafd0d7f876129b83a10daf64f186a50451679e8c2ac94b6872ab22442dc025dd6330fe1434802bcbbe97eda884bda153de65ecc18440c877713bfafd3f29f66bd7064e3f98c58941cec7e610f3e60e9ded1361b2ed"}, @random={0x0, 0x90, "163407f6eaa19b95488ea317747d3887399c76f494fdcecefc49f7a6f0050b95e011ba194a7fa53d812c84c28c7556d66fc4ec2bbce94fa7ffb6ea04894aa5ef3fdd631e9d346d551436ed66b704e360338db2a81570e77bca3d834e469a74c2b6d131741b5f074c47a03c37ca06d2e5d631233e3f1ffb0d0159bc556d0937c101917a813e9f1990a4facea20f7df860"}, @random={0x4, 0x28, "df7b6e25dfa6b2ff0261cb776fab70d31fb424f6151423f871e27a7e9d67ad527027e10eb2924e59"}, @random={0x81, 0x77, "1a5d0af2c9e175f26bab8c86733f5e2f96f7e740a4d5ccf233174eef36e45389610c101434918561a00adfe8e6b91f3a2c8f7d7269e219e03e4167c432a82aeb248fb5a0d546506f3f3ed09c1de7b34fe41e8e361e743d2574797d653f84ac2b8cc1e7545d55684ea62269154a94bbaa96a19a3526b3a3"}, @random={0x2, 0x68, "7ab0b732e39badbb44d5ae3599dcb9493d873fe895db84d29b66edff2dbf6811710a4762787d479a5040c8142d35aa941beeae5deaf18884c7ff78e29a3b5fdd17d6115aa1cb5243cc5eecb77fc9342b8005e491b0793d6316a3a0b2a11df47e836492268a8c1cd7"}, @random={0x8, 0xf4, "b1b1f9ccb2c3add3b5d5cd1569e910a43c7a4f48c07ce47a34d29e14a39f73d9f50b8a0d948acfa779d69bd275abefbbeee4e22dc3f876117b145938a51cc7cdb152e7b3043b4817231170e1d75ef955a2db3a3ee163ef881e31a6e0f3effcf3925dcfb2facd966b2dd3703de5d19e137f0e7b0b36badc159104da653fe9804c239dc7bbe594864bd425ac70a9ad101efd785e88ab280dc14144d852f641ffac0a5599964573b1e1c23bc050d02e2448ec54fcbd201c1521488ffaebcdfbbbb20817fb4c6e0e5d5955698b47b96bb6d619dd7b23b3c1614c71f2bb6131423a16c71b605cff910a30a7eafb2125d5de6a18e6bce8"}]}, @NL80211_ATTR_IE={0x47e, 0x2a, [@random={0x80, 0xab, "2d9a4c43ed0915e09ee3025edf31e87cff9f989adef7f415ed1077ea696092e8587f827d75f4b6103d2d34446da8971a0806f44059f9e3ec57669d8a6b2914c388dfc2fad8ddf28405a8783c7cf2a768fcd6fcad2b92a1afd78e29cf2037b08ecc8d3aaa42fa83437042b0ef730df068c27bdb4288d7d95ff6b1242fcea976f6bbaf0b87cf49a852ca9c243d0aae2faddcf0771ae8ebde04955763cc4a4a8cf6d0f18e42ed0083ab9d859e"}, @random={0x20, 0x21, "21010b5d6eb8e1742c0ae232db945a3a96c10d5f2a51a8e73ec9ff50aac377abff"}, @random={0xff, 0x78, "b0496664b81161360fc8f5aab5c77e4e44f7ac4c4f06562094fddf1e1bf158ce52c4f9e3473103bde6d1022e593c493423aae2e7932ed1290ed38e9779cedf4567f1271c61dd6fd6af287054014072ec8924d2c549d3e16e90076260c4728c28cb81435856fc9a968d745a1c0ecfbc3a4d15fc9a9b9e1cce"}, @random={0x0, 0x73, "1bbf83d0630060b619c19fcd0c9a86f84e4971b5df149898e710b58ae47f97fefd4d4b83bc5e72acd4a1a0e01eb28ca3bab4261d02e4a3e0f7e664f1ee5d95e3b117388f3dfa5bbfdcf350b86f2684cbd734e017611fa6639e8c8191fe49a04c050601f7f2f4913ef12e0ccb6182a71619edb8"}, @random={0x6, 0xab, "9ecc850585e5e4300e4bd0ace87d4da36c24d9cb4324d95728a6fce9b42d51c7a2b50a601494b8a98e0e8ac6a6f0c321270b6fee15ee6fd91a2cd72bee8be28db436713896a232073b3cfdb919e2798a64b0574a02f82853748e5498d108f263871b1da0cfec1a2e026d34cf029365e5cc79aa2f759ddd2d0e6e15b6ac30aa5c8c1ee07ae9d59a59eaa3b07fbbb23d7ac89ed5aaeb12b45962c757154dc790ac082e9e83df78d0c6e7aa95"}, @random={0x8a, 0xa0, "04f28da47c9f4ac912722c0c09327515827daffffbf468a9896f22e0e395c591b9aec46321deaa334e05c271f01fb4515812df2311e46317a54f7cf59feeb162c8e1498acecb5488ef165edb75d77963c5257588f493903ac37086b54dfc32e1755dfe19fa29d54140e019edb7b0d09c34b21c442829a78639cbbdb2724f159980207ccaaf0f962314a9a59653165220f183c914b1eee48b19dd8b75f3007188"}, @random={0x1, 0x31, "a1ebd16bd0fb4c5f8d0b85f08ba899fe9c184f9a6be5c698667e08c3556400738300bed179823a96c0753f71d39c7d33d8"}, @random={0x1, 0x18, "75d98d8e40d4f4977e1a12dd39d0bb40372ec47537e4ad49"}, @random={0x2, 0xbb, "8b04b6dd277d1895c0a46421484ae3a11735d83e6c8e3bdbc66dc32a7f174a9d17c3a2c571dd100fce09e1513d7e28648195c3f5edd3ce0c7618029bcac7be38aa7c4b285bd9617437edafaf136405e84077292a90f67c8d017a3318ec43776c9774882128617513e3dfe4f8aeec3c1355e8b134919988133c7ba7d115c97d64cf8d4613ba5cbcfb139c1ba082176ebf414e875221740618fb2c6c0ea92eb453211530d4c47c57faf885576c7174f483e69c4ea74f9ec5c59daff4"}, @random={0x1f, 0x60, "a05123b0af009d70277508cf694527229a8f70ace668f113b1ed4c6b605e7f0ae70f2701feb6d19bf2beead28ebc0719a5844ce181133a30ae5f0fd90837b7d8bfffcbea707726324d03458a8e971bc3f4f6c3c53542414f56b8f957c366829a"}]}, @NL80211_ATTR_IE={0xd8, 0x2a, [@random={0x0, 0xd2, "75df403a7be5b9ba1c95aba0467f79ce5c53a1f6016d8f5590d361b271545d8142687c7e0cdd0dd7f1a13cb8e1a4330a899b579c00af0316fdb0c7ec3e6cd440fdf84408450ad8759993bd120d1abd8937b7f70289a8c88ed4b9b039db62c7e732958faffcabad7664fce90ce63a14c93e9eb0fce9dd915ff29183322248e35cd9a15a7ac9532dd9fab46b8b6e1e5928dc2ec13d5576953ae4a6f1e8b15daff5dd83b71313a1394a2f20193ad7859ff37eefccb8eea5c3cdd7ebba2862db30f6793b0a80db1099893f1c7b4d2d72bb2c3bee"}]}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x30, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x26}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x19}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1a}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x255c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='-.+\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x8}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:22 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x4) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/246, 0xf6}) 22:13:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x300, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:13:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:23 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = signalfd(r0, &(0x7f0000000000)={[0x80000001]}, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80000, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0xb6, 0x1, 0x0, 0x7, 0x0, 0x6ff6, 0x40200, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2d, 0xa7b0}, 0x200, 0x7b0, 0xce47, 0x8, 0x40, 0x101, 0xf82c}, r2, 0xa, r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x7) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) 22:13:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x10}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x5, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x890) 22:13:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x40c, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffffa5) 22:13:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x600, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:23 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x120, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x100}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3f000}, {0x6, 0x11, 0xec24}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x40}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x100}, 0x20004800) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) clock_gettime(0x0, &(0x7f0000000080)) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x10) 22:13:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x900, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 22:13:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$SNAPSHOT_FREE(r3, 0x3305) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xa00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:24 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_complete(0x0) socket$pppoe(0x18, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:24 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg$can_bcm(r3, &(0x7f0000000280)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/30, 0x1e}], 0x1}, 0x12000) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xb0, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xd19}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) 22:13:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xc00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:24 executing program 3: syz_usb_ep_read(0xffffffffffffffff, 0x5, 0xc8, &(0x7f0000000000)=""/200) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:24 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080002000000000000067084e0700380068000080299078ac1414357f000001014420f5900000003f000000007fffffff000000040000000100731c80000000030100007f790848fefa44f18dd7b2e8e10ddb62440e4cf697ed3015a9cd768c7e0cb46a4448a78d1af1005edc9fe19c6d02e191e1920d6517fc619e43f89a839116fbd51d3f23d4223c5eb117cf1bf0bea18397d2a80da35cfcb0d3079de7e91e883cab66db2098f79686f7912dfda6cf60d06495382d1235584714c24159accb36a0bbd992128c48ea1fb153464f49389411e27f8d8cbe57641c0ff533fe28d5da4514e076022c61aa7ccde879f7b4ce894e7f"]}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000001440)=@deltfilter={0x2b44, 0x2d, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xfff2, 0xfff3}, {0xffe0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x20}}, @filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x5c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x10000}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8000}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0xd}}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0x7}}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xd040}, @TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xad}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x2a74, 0x2, [@TCA_FW_POLICE={0x460, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x100, 0x100, 0xe2, 0xbc, 0x8, 0x7fff, 0x5, 0x8000, 0x20, 0x4, 0x4, 0x7, 0xffffffff, 0x8, 0x3, 0x9, 0xf84da679, 0x7, 0x1, 0x8000, 0x2, 0x5, 0x8, 0x7fff, 0x3, 0xfffffffd, 0x9, 0x9, 0x3, 0x8000, 0x1, 0xfff, 0x6, 0x1, 0x2, 0x9, 0x6, 0x3, 0x7fff, 0x6, 0x1, 0x6, 0x7fffffff, 0x3, 0x7, 0xf1, 0x2, 0x6, 0x400, 0x94400, 0x8, 0x3b44, 0x3f, 0x800, 0x3, 0x10000, 0x56, 0x4, 0x1, 0xfffff8e8, 0x6, 0x2, 0x2cf, 0x2, 0x9, 0xff, 0x400, 0x1, 0x4, 0x1, 0x1000, 0x7fff, 0x4b, 0x7, 0x8, 0x10000, 0xd6d2, 0x101, 0x0, 0x8001, 0x7, 0x2d3e2bc, 0x6, 0xff, 0x883, 0x4, 0x2, 0xfffffffb, 0x390, 0x7, 0x9, 0xfffffffe, 0xdba5, 0x0, 0x7, 0x3, 0x0, 0x7, 0x3f, 0x863e, 0x1000, 0x8, 0x1, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x7, 0xffff7f0d, 0x5, 0x85, 0x0, 0xcbf9, 0x4, 0x4, 0xffff724b, 0x8, 0x3, 0x1000, 0x7fff, 0x2, 0x1, 0x2, 0x5a, 0x1, 0x100, 0x3, 0x0, 0x5, 0x8000, 0x3ff, 0x9, 0x10000, 0x3, 0x7, 0x80000000, 0x1, 0x5, 0x7, 0x0, 0xfffffffa, 0x7, 0x63e, 0x2, 0x4, 0x1000, 0x8, 0x0, 0xfff, 0x900, 0x9, 0x4, 0x30f7, 0x9, 0x499d, 0x7, 0x3, 0x401, 0x7, 0x0, 0x1f, 0x5, 0x5, 0x93, 0x7, 0x3, 0x80008000, 0x2, 0x0, 0xe0, 0x69, 0x1, 0x4, 0x3ff, 0x800, 0x4, 0xc9d, 0x7, 0x3, 0x336, 0x7, 0x7, 0x1ff, 0x6, 0x40, 0x9000, 0x9, 0x5, 0xfffffffc, 0x6e, 0x40, 0x1, 0x101, 0x1, 0x8, 0xc63, 0x7fffffff, 0x1, 0x3, 0x7, 0x1ff, 0x7, 0x2820, 0x0, 0x401, 0xff, 0xff, 0x1cd, 0x0, 0x9, 0x8, 0x8000, 0x1, 0x81, 0x7ff, 0x5, 0xe0, 0x0, 0x0, 0x5, 0xd8, 0x1, 0x9e94, 0x80000000, 0x189, 0x9ed8, 0x101, 0x80000001, 0x7ff, 0x401, 0x80000001, 0xa06, 0x400, 0x2, 0x4, 0xffffffff, 0x4, 0xd365, 0x2, 0x1ff, 0x5, 0x9, 0x3f, 0x3f, 0x8, 0x28f, 0xffffffff, 0x1f, 0x7094, 0x10000, 0xfffffffb, 0x7, 0x4, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x1, 0x0, 0xe181, {0x5, 0x1, 0x3, 0x60, 0x27, 0x8001}, {0xe0, 0x1, 0x3, 0x5, 0xfd68, 0x8}, 0x4, 0x8, 0xf54}}]}, @TCA_FW_POLICE={0x834, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7, 0xc9, 0x4, 0x0, 0x5, 0x9, 0x2, 0x1000, 0xffffff99, 0x20, 0x3, 0x6, 0x0, 0x8, 0x10000, 0x2, 0x4, 0x1, 0x401, 0x4, 0x8, 0x0, 0x6, 0xffff, 0x5, 0x8, 0x8, 0x3, 0xda28, 0xa65, 0x3f, 0x1, 0x4, 0x9, 0x80, 0x1f, 0x6, 0x101, 0x5, 0x2, 0x5, 0x1ff, 0x9, 0x20, 0x8, 0x7, 0x7, 0x8, 0xfffff341, 0x2, 0x0, 0x100, 0x5, 0x9834, 0x0, 0x6c, 0x46, 0x8, 0x5da, 0x6fbe, 0x143, 0x400, 0x8000, 0xffffff01, 0x81, 0x100, 0xb49, 0x7, 0x20, 0x3, 0xf02, 0xc02, 0x4, 0x5, 0x25e, 0x1, 0x7, 0x7f, 0x400, 0x76, 0x10000, 0x4, 0x7fffffff, 0x4b, 0x4cd9, 0x9, 0x82e, 0x401, 0x7, 0x40, 0x7, 0x7, 0xfffffff8, 0xfffffffc, 0x5, 0x8, 0x3, 0x14, 0x8, 0x7fffffff, 0x40, 0x7fffffff, 0x3f, 0x6, 0x5, 0x800, 0x3, 0x3, 0x175c, 0x20, 0x12000000, 0x1, 0x8001, 0x8, 0x7, 0x2, 0x0, 0x1, 0x12, 0x4fb, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x2, 0x4, 0x9, 0x80000000, 0x40, 0x3f, 0x9, 0x2, 0x0, 0x2, 0x85, 0x8, 0x9, 0xfffffffe, 0x4, 0x3f, 0x200, 0x7ff, 0x7ff, 0x0, 0x2, 0x54f1, 0x20, 0xfffffffb, 0xa164, 0x2, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x6, 0x9, 0x2d0, 0x9, 0x2, 0xfffffff7, 0x9, 0x7ff, 0x7fff, 0x0, 0xfffffff7, 0x6, 0xffffffff, 0x2, 0xffffff7f, 0x9, 0x0, 0x5, 0xf60, 0x1, 0xfff80000, 0xe8, 0x7fff, 0x3, 0x4, 0x5, 0x9, 0x3ff, 0x101, 0x4, 0x2, 0x7, 0xfb, 0x5, 0x4, 0x7, 0x3ff6, 0x6, 0x1e6a, 0x10001, 0x7, 0xfffffbb3, 0x7, 0x5, 0x1d45, 0x40, 0x0, 0x20, 0x3, 0x355a, 0x7, 0x1f, 0x19f, 0x6, 0x3, 0xffffffa2, 0x634, 0x8, 0x7fff, 0x1, 0x510e, 0x8000, 0x0, 0x3, 0x44d2efc9, 0xb592, 0xac, 0x5, 0x1, 0x5, 0xf3a8, 0x8, 0x6, 0x40, 0xfffffff8, 0x7fffffff, 0xfffffffd, 0x80000001, 0x2680000, 0x3ff, 0x1, 0x6, 0x1, 0x101, 0x1, 0x7, 0x0, 0xffff, 0xc98f, 0x4, 0xfffffff8, 0x6, 0x0, 0x7fffffff, 0x8, 0xbf6, 0x6f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xfffff801, 0x2, 0x2, 0x1, 0x9, 0x9, 0x8000, 0x2, 0x9, 0x3, 0x8001, 0x2, 0x400, 0x7fff, 0x40, 0x5, 0x3, 0x2cc, 0xfffffffb, 0x6, 0x2, 0xfffffff7, 0xff, 0x3, 0x0, 0xc06, 0x1, 0x10000000, 0x0, 0x3, 0x8e, 0x0, 0xfffffffd, 0x80000001, 0x2, 0x1, 0x4, 0x6, 0x3, 0x6, 0x75a5, 0x800, 0x337, 0x10001, 0x401, 0x6, 0x0, 0x5, 0x4, 0x5, 0x1ff, 0x7f, 0x80000001, 0x8000, 0x7d6a, 0x4, 0x200, 0x34, 0x4f, 0x80, 0x0, 0x200, 0x3, 0xfffffff9, 0x9a, 0xc5c, 0x462, 0x0, 0x200, 0x20, 0x8001, 0xfa, 0x8, 0x7c8, 0xd5, 0x5, 0x9, 0x63, 0x169, 0x4, 0x0, 0x80000000, 0x9, 0x3, 0x7fff, 0x422, 0x9, 0x401, 0x44, 0x0, 0x1000, 0xac, 0x1f, 0x9, 0x82, 0x729b, 0x80000000, 0x5, 0xfffffff9, 0x6, 0x1eb99f0, 0x7, 0x80, 0x400, 0x9, 0x1c40, 0x29a, 0x5, 0x7, 0x3e9c146f, 0x5, 0x7fffffff, 0x4, 0x6, 0x0, 0xfff, 0x1, 0x5e3e184f, 0x0, 0x9, 0x8, 0x6, 0xd54a, 0xe0, 0xd8, 0x7, 0x8, 0x2, 0x8001, 0xfffffff8, 0x2, 0x28b, 0x8, 0x0, 0x532b, 0x200, 0x3, 0x1, 0x80000, 0x20, 0xc0, 0x2, 0xea, 0x0, 0xfffffacb, 0x0, 0x80, 0x20, 0x2, 0x1f, 0x5, 0x6, 0x2, 0x117, 0x6, 0xfffffffc, 0x1000, 0x7, 0x8, 0x0, 0x8da, 0x401, 0x0, 0x8, 0x800, 0x1, 0x9, 0x1, 0x81, 0x2, 0x4, 0xe1ad, 0xff, 0x2, 0xfff, 0x0, 0x0, 0x100, 0xffff3664, 0x6, 0x7fff, 0xd7df, 0x7, 0x7fffffff, 0x9, 0x5, 0x7, 0x8001, 0x0, 0x401, 0x5, 0x8d70, 0x1, 0x0, 0x580, 0xd6, 0xd29, 0x20, 0x17d0, 0x1d4, 0xe000, 0x0, 0x1, 0xfff, 0x100, 0x3f, 0x8, 0xffff0000, 0x7fffffff, 0x92, 0xfff, 0x1, 0x20, 0x0, 0xb8, 0x55d4f000, 0xffffffff, 0x4, 0x80000001, 0x5, 0xffffffff, 0x1f, 0x7ff, 0x7, 0x10000, 0x8, 0x6, 0x5, 0x9, 0x7fffffff, 0x1, 0x3f, 0x3, 0x1000, 0x1, 0x5, 0x4, 0x6, 0x7fffffff, 0x400, 0x5, 0xc5, 0x200, 0x280, 0x9cb4, 0x1, 0x8001, 0xfffffe01, 0x1, 0x1, 0x231, 0xa8, 0x1000, 0x200, 0x80000000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}, @TCA_FW_ACT={0x16d0, 0x4, [@m_skbmod={0x160, 0xf, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x955, 0x1, 0x0, 0xfffffff8, 0x1}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0xed, 0x6, "e06983a0f5a2a7baf0ab9689addd2f1e5115b9ed6e7ab58ed12e4a81dfc71ad2edc446fffb6faf8c2b9db51d8c6c23ad31af68c4726562a7212ddbb208123d3f2bc20dbbb68f61283054d93c8cb5c6c219fe10a8da8f22f661c52fdfb9720ef72fed854980f93b34dd9eab11338e40b9b70e98c600f84eaaf01b3520127da0a568e775358508663dc383f7360cc3331444f263d2c4c3f012dd3a212704d5fbc3b1a29023dbbed011f225f1d30d275649b202fc150a5c0c1ac24cbd9973f56efcf3dabbe0a16b845ddf1d353a5b9f4cf07aa66be926610e067103008225e6354637a7cb7cf0e8ba7a81"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x1050, 0x1b, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x2, 0xfffffff8}, 0xca}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x51c, 0x15, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xbc00000, 0xffff, 0x83, 0x1, 0x5, 0x0, 0x2, 0xffffff00, 0x8, 0x4, 0x6, 0x3, 0x6, 0x200, 0x10001, 0x8, 0x7, 0x9, 0x2, 0x2, 0x3, 0x5, 0x1, 0x9, 0x1, 0x7f, 0x7fffffff, 0x5, 0x8, 0xec6d, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0xffffff15, 0x1, 0x3, 0x7fffffff, 0x8, 0x4d0, 0x400, 0xfffff801, 0xac8d, 0x7, 0x5, 0x20, 0x80ee, 0xb0, 0x7, 0xffffff00, 0x200, 0x1, 0x80000000, 0x8001, 0x8, 0x4, 0x5e83, 0x81, 0x8, 0x63, 0x0, 0xfffffffc, 0x3, 0xdad1, 0x10000, 0x101, 0x4, 0x7fff, 0x5, 0x1ff, 0xd6d72418, 0x8001, 0x0, 0x101, 0x38e, 0x2, 0x80, 0x3f, 0x3, 0x8, 0x61db, 0x1, 0x5, 0x7, 0x5, 0x5, 0xd3, 0x2, 0x51c, 0x8, 0x80, 0x52, 0x3, 0x800, 0x8, 0xb8d4, 0xfffffffa, 0x8, 0x5, 0x1, 0x3, 0x4, 0x0, 0x3, 0x1e, 0x7, 0x0, 0x9, 0x1f, 0x7ff, 0x401, 0x0, 0x7, 0x80000001, 0x1, 0x5, 0x9, 0x9, 0x9, 0x9, 0x6, 0x10000, 0x498d, 0x80000001, 0x8, 0x3f, 0x0, 0x1ff, 0x81, 0x0, 0x4, 0xff, 0x8, 0x4, 0x80000000, 0x20, 0x2, 0x81, 0x65, 0x9, 0x3, 0x2dbe, 0x8, 0x89, 0x5, 0x7f, 0x0, 0x4, 0x2, 0xc9, 0xb219, 0xbed, 0x1, 0x1, 0x0, 0x851, 0xef, 0x9, 0x1, 0x0, 0x40, 0x7fffffff, 0x0, 0x727, 0x101, 0x0, 0x5d0, 0x8000, 0x9, 0x20, 0x4, 0x3, 0x1, 0xfff, 0x7fff, 0x0, 0x9, 0x39, 0x3, 0x81, 0x81, 0x2, 0x1f, 0x5, 0x3, 0x80000001, 0x80, 0xfb, 0x3ff, 0x7fff, 0x6, 0x200, 0x5, 0x3, 0x0, 0x7f, 0x8000, 0x80, 0x6, 0x4, 0x7, 0xfffffffe, 0x8, 0x6, 0x4, 0x8000, 0x8, 0x1000, 0x80000000, 0x1ae, 0x7, 0x2, 0x3, 0x4, 0x2, 0x5, 0x7, 0x7f, 0x1, 0x4, 0x5, 0x7, 0x5, 0x8527, 0x8bc5, 0x0, 0x3f, 0x80, 0x6, 0x3, 0x8, 0x6, 0x9d9a, 0x3, 0x2fa, 0x4, 0x4, 0x3, 0x7, 0x1, 0x6, 0x0, 0x62332a7b, 0x7, 0x6, 0x3, 0x9, 0xffffffff, 0xfffff001, 0x10000, 0x9, 0x5f9, 0x0, 0x1, 0x9f]}]]}, {0xeb, 0x6, "7c1e26e5c3dc43cb24ec9e72b479ba8cefbc016ef1543879ff23565134b43af2ad9ab2d88b348451bb7a07dc1910ccf5060594fc78f473a347730f6b801087fda5bd50a669d98aef607f9d787e0e8fa6dc88f59c06c0651ff27adeca5982c63453bd23d6666fb9344271929db848d5f3ada78c5492a855829ea69825f406334dccc92bfddd8cd979b98c99d9371e26a5ab58aef4b4d589f6b1c30a2758fa5fc8847140b68984dd13de3e24c9d5839cccf5d9c4d5826a9afeeece9e80e8ab3aab541518af8cd18f82b6fdd817e38a2c4a51e258c47ce604f4c8947eb3c8bea95ab451a69b26f2c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_POLICE={0x46c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xdd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x3, 0x8, 0x8, 0x0, {0x3f, 0x2, 0x0, 0x3, 0x800, 0x3}, {0x5, 0x0, 0xff, 0x3, 0x1, 0x18}, 0x8, 0x5, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x67f}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7, 0x7, 0xfffffe01, 0x42, 0xffffff7f, 0x80000001, 0x8, 0x3, 0x6, 0xb9961e74, 0x8, 0x0, 0xa9bd, 0x4, 0x7ff, 0x40000000, 0x6, 0x6, 0x5, 0x104, 0x86, 0x5, 0x3, 0x4, 0xa0ca7f57, 0xa6a3, 0x7, 0x8, 0x4, 0x100, 0x7, 0xc0000000, 0x0, 0x2, 0x1, 0x3, 0x6, 0x40, 0x4, 0x5, 0x800, 0x0, 0x3, 0x2, 0x7, 0x4194, 0x10000, 0x1, 0xb4, 0x4c, 0x1, 0x800, 0x7be9, 0x6, 0x81, 0xffffffff, 0x9, 0x3, 0x0, 0x0, 0x7ff, 0x8, 0x9, 0x5, 0xfffffff9, 0x59, 0x3, 0x14000000, 0x8001, 0xfff, 0x7ff, 0x5, 0x1, 0x0, 0x3, 0x6, 0xfffffff9, 0x628f, 0x3, 0x9, 0x10000, 0x100, 0x1, 0x4, 0x6, 0xdfd4, 0x3f, 0x3ff, 0x7fffffff, 0x7fffffff, 0x8bae, 0x24, 0x9000000, 0x52, 0x2400000, 0x5, 0xfff, 0x8, 0xfff, 0xfffffffb, 0x9, 0x4, 0x40, 0x3, 0x3, 0x80000001, 0x7f, 0x91f7, 0x2, 0x401, 0x100, 0x20, 0x1, 0x3, 0x9be, 0x3, 0x6, 0x7be9, 0x0, 0xffffff17, 0x1, 0x4, 0x0, 0x3, 0x5, 0xe0, 0x3, 0xfffffffd, 0x3, 0x0, 0x800, 0x98, 0x9c74, 0x2, 0x3, 0x4, 0x9, 0x9, 0x58c29e99, 0x8, 0x1, 0xffffffff, 0x7, 0x3f, 0x8, 0x400, 0x5, 0x9, 0xffff, 0x0, 0x8, 0x115, 0x9, 0x8000, 0x4, 0x4, 0x21d, 0x6, 0x1, 0xffff7fff, 0xad80, 0x200, 0x1, 0x1f, 0x4, 0x4, 0x4, 0x401, 0xfffff001, 0x4, 0x0, 0x6, 0x0, 0x0, 0x54, 0x1, 0xfffffff8, 0xf44, 0x101, 0xebb, 0x2, 0x1, 0x6, 0x4, 0x1, 0x6000000, 0x20, 0x8, 0x7e3d920d, 0x1ff, 0x5, 0x10001, 0x8f, 0xab4, 0x2, 0x200, 0x1e559e10, 0x4, 0x9, 0x6, 0x4, 0xfffffe01, 0x7, 0x2, 0xffff, 0xffff0001, 0x401, 0x8, 0x3, 0x8, 0x4, 0x4, 0x5, 0x7, 0xcc7, 0x3, 0x8, 0x5, 0x4, 0x3, 0xfff, 0x0, 0x9, 0x5, 0xff, 0x9, 0x8020, 0x401, 0x7fff, 0x9, 0x400, 0x400, 0x40, 0x7, 0x1, 0x8, 0x0, 0x20, 0x6, 0x3, 0xffffffff, 0x80, 0x3, 0x4, 0x3, 0x6, 0xfffffc01, 0x6, 0x9, 0xfff, 0x0, 0xffff, 0x5, 0x40, 0x9]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0x6}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xe}}, @TCA_FW_ACT={0x280, 0x4, [@m_skbmod={0x11c, 0x3, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10001, 0x800, 0x8, 0x1000, 0x7}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0xb8, 0x6, "93ff43b9bfeca01a7439ed25ebbb1e10f7b4cba7d4d34f4c278d6c46ba6f2dea0ecb1592218a91e5c3136452408e208058045560359c53104cdaa57a7eeb00962bf63a189496fd7a2bf119918cbc5f21e55125d84f9a4d2dab8e33ff0401a23c7fa77d93a7125bf89658672c86925bec9ede5cabf63f4ea645a6b0fbe2c5f92f8d80ea531e30441f2466acb3774485ce473da0a0e7ed52d7322388d9a2ec0ea994c36c526b68d67b46f29e1c5af0763311b73f28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x7c, 0x11, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0xb96, 0x0, 0x7, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x1d}]}, {0x32, 0x6, "01892f691709f69e244e6fb79dfccf22fd3a3a1dea2a2f1c33b50316d2ff5abfc8b0f978eb118d0ac53ad456d14e"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mpls={0xe4, 0xf, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5}]}, {0x9d, 0x6, "55871aa2b264c6cf6ed281c1be5843127be9d07ed28781e2efcf85eb7059ef764d03902bde6aab1ba8f107adb547eb844f98d6dd2a9f3456f4c3ab32ea29f6de76d123df70902aa95160246f3ae54c567f6f5b0e3648f814469676a505e7fe1cadda3cfcbae198163763e8e0fb51de59133ea751836210a2497d76e174e039d95f3bb48f582b09ff126608a663ea83e26673044c4b6f4c9687"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x80}, @TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FD={0x8, 0x6, r1}]}}, @TCA_CHAIN={0x8, 0xb, 0x68}]}, 0x2b44}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept$packet(r1, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000013c0)=0x14) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000001400)={'nr0\x00', 0x6}) 22:13:24 executing program 0: read(0xffffffffffffffff, &(0x7f00000002c0)=""/251, 0xfb) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) bind$phonet(r3, &(0x7f00000001c0)={0x23, 0x1f, 0x6b, 0x20}, 0x10) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000040)={0x3, 0x2, 0x7, 0xb2, 0x8000, 0x40}) 22:13:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 22:13:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xc04, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:25 executing program 2: unshare(0x20000000) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) pkey_alloc(0x0, 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x8080, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:25 executing program 3: socket$packet(0x11, 0x2, 0x300) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x3000, 0x4) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xe00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={[], 0x39}}, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x8, 0xfc) 22:13:25 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffff0000}]}, 0x54}, 0x1, 0x0, 0x0, 0x8814}, 0x810) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 22:13:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 22:13:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xf, 0x40000) r4 = dup(r3) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000)) statx(r4, &(0x7f0000000080)='./file0\x00', 0x800, 0x8, &(0x7f00000000c0)) 22:13:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 22:13:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xf00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) 22:13:26 executing program 3: socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0xffff, 0x6, 0xff, 0x9, 0xff}, 0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x8001, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000200)={0x27, 0x1, 0x1, 0x0, "a3fc6104b719878cf655ef333649ef"}) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) dup(r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) fgetxattr(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='osx.TQROXY\x00'], &(0x7f0000000140)=""/144, 0x90) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x63) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:13:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, &(0x7f00000001c0)) 22:13:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x3f00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20200, 0x0) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000040)={{@my=0x0, 0x2}, 0x6, 0x200, 0x200, 0x3}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r6) readahead(r6, 0x0, 0x5) 22:13:26 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000000)=0x10000) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 22:13:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000040)={'wg2\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ioctl$TCXONC(r3, 0x540a, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="f7", 0x1}, {&(0x7f0000000040)="6f2f8e2f29c40170036d2c71020fb52c32ea39fbac22a6f7a3f817455adca399e8dc70dc2eb287a07399dbd1f6656a7bd5bdb1b418c2411e3be7f451c46899096128f4864e5f3c23549c7eedc1a989e082ec82384aff2c42678c0de6e0a4d8c684375e5743a6747f441fb9a2b148ffec2895cee062a33d3777a69e827b61b294aa7275", 0x83}], 0x2) fcntl$setflags(r0, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x5865, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:27 executing program 1 (fault-call:12 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:27 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)=""/51, 0x33}], 0x1, &(0x7f0000000200)=[@rdma_dest={0x18, 0x114, 0x2, {0x8, 0xc0b}}, @fadd={0x58, 0x114, 0x6, {{0x100, 0x4}, &(0x7f00000000c0)=0x3f, &(0x7f0000000100)=0x7fffffff, 0x6, 0xec, 0x6, 0x753, 0x25, 0xff}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000140)=""/77, 0x4d}, &(0x7f00000001c0), 0x31}}], 0xa0, 0x48840}, 0x10) 22:13:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/236, &(0x7f0000000100)=0xec) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x6000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 469.879311][T18301] FAULT_INJECTION: forcing a failure. [ 469.879311][T18301] name failslab, interval 1, probability 0, space 0, times 0 [ 469.939899][T18301] CPU: 0 PID: 18301 Comm: syz-executor.1 Not tainted 5.9.0-rc7-syzkaller #0 [ 469.948606][T18301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.958669][T18301] Call Trace: [ 469.961985][T18301] dump_stack+0x198/0x1fd [ 469.966330][T18301] should_fail.cold+0x5/0x14 [ 469.971033][T18301] ? do_sys_poll+0x270/0xd40 [ 469.975663][T18301] should_failslab+0x5/0xf [ 469.980090][T18301] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 469.986169][T18301] __kmalloc+0x6f/0x360 [ 469.990339][T18301] ? __might_fault+0x190/0x1d0 [ 469.995124][T18301] do_sys_poll+0x270/0xd40 [ 469.999586][T18301] ? is_bpf_text_address+0xcb/0x160 [ 470.004799][T18301] ? compat_core_sys_select+0x7c0/0x7c0 [ 470.010363][T18301] ? mark_lock+0x82/0x1660 [ 470.014829][T18301] ? mark_lock+0x82/0x1660 [ 470.019363][T18301] ? __lock_acquire+0xb92/0x5780 [ 470.024353][T18301] ? lock_downgrade+0x830/0x830 [ 470.029914][T18301] ? _parse_integer+0x132/0x180 [ 470.036178][T18301] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 470.042179][T18301] ? _kstrtoull+0x186/0x420 [ 470.046704][T18301] ? lock_is_held_type+0xbb/0xf0 [ 470.051662][T18301] ? find_held_lock+0x2d/0x110 [ 470.056448][T18301] ? lock_is_held_type+0xbb/0xf0 [ 470.061402][T18301] ? find_held_lock+0x2d/0x110 [ 470.066208][T18301] ? ksys_write+0x212/0x250 [ 470.070728][T18301] ? lock_downgrade+0x830/0x830 [ 470.075589][T18301] ? vfs_write+0x397/0x730 [ 470.080021][T18301] ? lock_downgrade+0x830/0x830 [ 470.084880][T18301] ? get_pid_task+0x138/0x200 [ 470.089572][T18301] ? set_user_sigmask+0x211/0x2a0 [ 470.094606][T18301] ? __mutex_unlock_slowpath+0xe2/0x610 [ 470.100157][T18301] ? __set_current_blocked+0x110/0x110 [ 470.105625][T18301] ? wait_for_completion+0x260/0x260 [ 470.110924][T18301] __x64_sys_ppoll+0x210/0x280 [ 470.115715][T18301] ? fput_many+0x2f/0x1a0 [ 470.120048][T18301] ? __ia32_sys_poll+0x440/0x440 [ 470.124995][T18301] ? lock_is_held_type+0xbb/0xf0 [ 470.129938][T18301] ? syscall_enter_from_user_mode+0x1d/0x60 [ 470.135843][T18301] ? check_preemption_disabled+0x50/0x130 [ 470.141569][T18301] ? syscall_enter_from_user_mode+0x1d/0x60 [ 470.147476][T18301] do_syscall_64+0x2d/0x70 [ 470.151899][T18301] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 470.158224][T18301] RIP: 0033:0x45de89 [ 470.162155][T18301] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.181768][T18301] RSP: 002b:00007f844e6bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f 22:13:27 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x82001, 0x0) recvmsg$can_raw(r3, &(0x7f0000000680)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000003c0)=""/60, 0x3c}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/214, 0xd6}], 0x4, &(0x7f00000006c0)=""/222, 0xde}, 0x41) clone(0x1000000, &(0x7f0000000000)="f8de86706c2ac452acf244ebf315695fad6c4853e674daf5669fbbf32bd486c9f82913388d36db42d08a135aeea1a8eeac3cac7520ed9c21aacef67d58474026ba0d2fe37c0a83b40b4c2065661e357b766bad8639b0b849d935e194736c8e8509060e235d07f3a973a48fbec1f830c24a47de855d3411871671ee7a0807154fbd228446e01e76d75208059dc67d7ee45cfda40d5a8e6abe5df2e53c4a4950537b0d7656362f43e7c129d57f40055277d9518c3f94bf", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="e4a1fdcf74ab882e96f31142081543098ed4f7651477f11fe589724bc812694d3baff67ad6de65739bf7317327ca4204c000b223095e939b5ab882cc386f16af7f0cb4c00be55bf40c7752cecdcc4ea163a62f640c4a9a31acb009640b00c6f9a62d5a64af6532642e69f71887b6c281cf30e4ede6ba53c73663711b3f01e8f716cb794c617d5dcd4c396495242fd31d5b73c4ebeeb880304adf278006b9a39c2a5087e6d55f95303e6197868216e75398fe48a7741e826d8f32497f571c260649b16c8c42ecb082051f9ec8c1abc1d0e8c756f1cb69c7ddccb1730a904e337d8a5ed978f731d2e9dfce9553c2ac1f39997c7870db0773") setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 22:13:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xa45, 0x18800) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000280)={0x3, 0x70, 0x7, 0x4, 0x52, 0x1, 0x0, 0x20, 0x41400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000001c0), 0x11}, 0x0, 0x3, 0xfffffffb, 0x7, 0x3, 0x9, 0x2}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 470.190194][T18301] RAX: ffffffffffffffda RBX: 0000000000025040 RCX: 000000000045de89 [ 470.198178][T18301] RDX: 0000000000000000 RSI: 20000000000000c3 RDI: 00000000200000c0 [ 470.206156][T18301] RBP: 00007f844e6bbca0 R08: ffffffffffffff34 R09: 0000000000000000 [ 470.214154][T18301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.222145][T18301] R13: 000000000169fb6f R14: 00007f844e6bc9c0 R15: 000000000118bf2c [ 470.304034][T18315] IPVS: length: 236 != 24 22:13:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x6558, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 470.380615][T18326] IPVS: length: 236 != 24 22:13:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, {0x0, 0xaf, 0x0, 0x2, 0x4, 0xfffc, 0xfffe, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r7, &(0x7f00000003c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x7fffffff, 0x2102) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000440)=@fragment={0x8, 0x0, 0x3f, 0x1, 0x0, 0x9, 0x64}, 0x8) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r5, 0x0, r9, 0x0, 0x8001, 0x0) write$P9_RREADDIR(r5, &(0x7f00000002c0)={0x2a, 0x29, 0x2, {0x8001, [{{0x1, 0x4, 0x1}, 0x4, 0x6, 0x7, './file0'}]}}, 0x2a) lsetxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:27 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044001}, 0x24008001) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:28 executing program 2: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0x1}, 0x16, 0x900b08440962fb0f) unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x6]}, 0x8, 0x180800) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000280)={{0x1f, 0x94}, {0xa5, 0x8}, 0x1, 0x0, 0xfb}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000001c0)=0x7, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @identifier="c875b37fde03331c345d2b4ff2747a52"}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x38d101, 0x0) fgetxattr(r5, &(0x7f0000000100)=@random={'system.', ']#\')}/-^]^#-:%}.\x00'}, &(0x7f0000000140)=""/3, 0x3) 22:13:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x8100, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="700200225821e108aeb90467ad85001a0000022abd7000fbdbdf00000000000000000000000000000000000000000000000000004e2400054e2300000a0020803200"/75, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ff0200000000000000000000000000017c48a3073300000000000000000000000000ffffe00000020200000000000000030000000000000001000000010000000300000000000000ff0300000000000003000000000000000200000000000000030000000000000004000000000000000002000000000000030000000000000008000000000000003f000000ffff0000c458000026bd7000073500000200007f4a00000000000000440017000a0000002abd700026bd700029bd700026bd7000ffffffff000000807f0000000300000007000000010000000400000040000000eb0c0000040000002000000024000900a45a000000000000ff0f00000000000009000000000000009c820000000000001c00040000004e204e230000fe8800000000000000000000000000010c000f0081ffffffffffffffe4000600fc010000000000000000000000000000000000000000000000000000000000004e2300074e2300000a00a0002e000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYBLOB="0a010101000000000000000000000000000004d42b000000ac1e0101000000000000000000000000010000000000000001000100000000000400000000000000ffffff7f00000000080000000000000001000000000000000000000000000000060000000000000001000000000000009008000000000000400000000000000020000000000000000400000000000000000000002bbd7000ff3400000a00010600000000000000000c000f000500000000000000"], 0x270}, 0x1, 0x0, 0x0, 0x8800}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000004c0)={0x53b, 0xc, [0x3ff, 0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x8, 0x15e00000, 0x0, 0x4, 0x400, 0x4, 0x2af, 0x7f], 0x8, 0x800, 0x0, 0xffffffffffffffff}) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x4e24, 0x401, 0x4e24, 0xfffc, 0x2, 0x80, 0x80, 0x0, r1, r5}, {0x0, 0x6, 0x8, 0x1ff, 0x10001, 0x1ff, 0x4, 0x7}, {0x4, 0xffffffff, 0x400, 0x8}, 0x5, 0x6e6bbb, 0x1, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in6=@private0, 0x3506, 0x4, 0x1, 0x5, 0x0, 0x7ff, 0xfffffffd}}, 0xe8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x38, 0x7, 0x3, 0x1, @private1, @rand_addr=' \x01\x00', 0xf850, 0x1, 0x9, 0x8}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="94110000", @ANYRES16=r4, @ANYBLOB="000227bd7000fbdbdf250e000000180002800a00050051c9400d20bd00000400010004000100280001801400020000000000000000000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200677265746170300000000000000000000c0001800800030007000000e810028008000200610d00000800020004000000a2000400775e60e36a309ad667d55a6146ef12a5826a418e7903d0a4b08dc708dd274a2b831e80445306873ad35d5d76f9fff5116027d6f4167221d9f7e43232101391b02928415a932007ea794a646acb99a7f00e91f2f682bde1843fddece98c8dd94f162beed4c37a2ef26788cf03c4b7b0eff1f9e496f40d6e9b2e285524253c1656155bf942271f1a498052279ac49a1d9e494882676facfc8dfd71eb780fce000004000100200004002bc231030a0e803186ca587b09dc39be6927809b9ddd3c8668f5b195041004003498291cc770baaa91edad632a6cbbdee9cb639527b8120c14c84aa0b8211a697db46b553740ba072c43612180b438f32d0f23fc44b8e12ebaa5772f0eeda1b131c84731039ed83d1edf842003060c2a5971e81595fa937b9d16ed94b70472b290ebf2d263f62431d83a9e8b65e1474ce1d4658d27fea2160de52ba8f2edcfc55fbf094c1b93955a717a1d32e12a6c3a29c4d7185747f4a9c0e019f4730ee31050c361b3a3cc5bd207fdf96869e46e50265fe893e27a643e3d6637f55d884e7f28991edd97d808f4a69aadb909fd5f5ed11a9a0015918841198dddcb0c0be5afa0aa5d5a6d804e9bedfc64a60ae0965c5af70c398f6fccfef45eaa332d8809ab377bc83e4f1d0d134da2d7ed25f682085971857e815048c1fb5a2ebb83e71f55f3ff1b35c5e27fd0a8ae171f421511862ce30dc2f1f37ee2d68049c7fa4d026eb9858c0f0691ef33445daefc6697bb72358ab3c0da560a55cc72cea3558a508975af6d779efac3de9e305515a11a97f6adf1878db7edf478f199764431027d7f2134b574209fbe9b3665f71a1c96bd696ffd3768adfefec5f548e2f28d43705b4ccf46415ae6c0f87a6491a7bb7cec0b5a7b468034e71f615941d046c6dfdd6e4638bf0f69d691d760165d1b2890996210d9c3461ef26b29fb9114f81e73c8f806c2292cf30b1446229dcdbab7f5977288f0c188484144c8c9df63ec750ea44e0d49e8051d2563d96d908dd38951ae45c18e91233792452c2e97232a14c0bb1d25f7bbce01e8c0f4be88589fa6fcf6edae53ac1f9d57ebbd7906a5643b6ed8438937f18df478bdd65de05d8386647482095762c9956f86a1c9f67720b265d9f00a5ea67b3094009b4379d5f80f11683955d8459430b007d7a6e8d10d37bb8314aa1847bfcd71f420bc52bbf7f86af6ab8f4531f92c02cd7940ad950607be48ee32b72f3b07863b1ca57968e5f8996dcacd34e4dc3bed615d0f67f948ab2e2e7cf64d4ea9775819f89cf8cd36370e2cbf42abc6e60e0bec9fbd8bbf5008f756f8221a25dedab44ddda418c3f6238aaef2bddddb8173e8b5d4263c9140c99b06e735eaa36554a4144bc5c348ccd1e45ecbaef5dcca808264a03fa485eb5bd7d1d6dfdf6c28fb4086ebc7dc502c27741e8c38c0f8d060892ad9819b5464aa8bab97980cad199febf3d9b9ddadb045d2cb323a967180fdc076b13508138a0c8f0facfed195b2e6a383d444a0e39c16356d326190dc27cc7956fcf6713459df2e665b38700e0b77b081b086be0714234842b0f7b7db38b24b53cba1061ab644fad9af301c55388a1b3512d7eea9fc9ec3317d79e677099111db078f731cbe704823e37a3aac82d7ffcb008e647d9a624224dc6d7eda05966bd00a92133cff38b58e4ef4f720e686cca62304b5a6dbe7c661c6f65983d3dcd9794226860a503994e6fbc1041f356733e02f38b7e34dbcb5a660637b6ad74c74066d8d96190facae52a5046d0446a0115ac4b79dbfad7bf53ae2afa2268a1b6769817cdcd56fa0f06d254e61edecdb74cf4c774e560b5942fe33875a94f65be4b4bdb91dca23beea20e5d87c229b8ea6609ae442c2db9ddbbad5d03a8ff5cd442bd0b16b67caf85cd153932a1c5fde108c6d14854e10db56d61c15afe58fac63636dfab62b234382fb8ccbe8e945d0b16f21b1abfe8aa01ab87de20693e5eba711bdfe084e0e5c6178b33bdb1f61a79e92ad1f81646b2ccfd88178bcbfcfdd33ded672e95f71b456e657cff5b53da8778a8c8d5c4e0a356a2e611e9425f04ce95446e7d09abbae9a2fb4947d26948a5918f61fbb8f6b02eaa75eb32fa5e05a23c991ef9631ff8f7beb319daeb125e12f656ca2655bcc511ed96d9551cb5412528db0175076eec8a5d1ee5cfcd581013e68450d9940d2f8f94fe22a032ae260d49148f689088e1fa75f2a331e2abfe99a6f2f798002e99b071db6cece59ed1c110b01da88c7ae3775ad90b5b0a6b8f10dca17978ebc94f16d7b5e8b5322edbf673a66efb0d9b2bb67016db5215cfe2f97563c27d864db68154d2ec661596a4291282157b9bf89963029647bb49b45cc8e2ae5019eecea2591cfaa15ccb8472e21f58fa490b6be4b5b3634bae9caca468db48e5d31f17394fd98964e86d1eef0f3cb552e9376044e2f43de923ae95d7b681e661dd67a965a71cbac2e7af430269c35208592d84ddb4a0d8ad8eddc28b85aefc91f5413cc62d1a0c79f1c89b7bc4d006ffeb5a15a0507ac27628c71b2dbdff9b0b5ccf652d58e0797e4b580a85ddab8aa6b94a3900c8ce04aa32e225f4a94b5c081ad6d564ad54ec08eaf89020c5ea0ddbc109911964a5ac2ba3cd39f8e2d6bcfb8784875292caf8f4057d731d358774b9473632b35e2daa1aded400fc9333787dd3e07e50cfe6635f510b6535a134c13f644a2879a533626aae9fde711a32b0c631a945c655005f99e0baa6889f75edc506968e547f7e462d5322b9658ba8e0a15f2a1921421784ce39f78762eaafaaf45885434f69089647e38cca19f60157c012d1d171e06ad26e42520d4048c251c6f6be4d7f8d22507874ddc9cceb94a54a1eafe051cb4cc864698bcb95b963161b37ec5c82348286fbc545a312e46da8dcc4cc0d6c53468cbbb877dbd9b3026e0815088a4ed05439b140b4a0a0276d0d866fa00a67ab3ea937a490f7d821325a557b2adfcd23506eb6f40d46a3271ca434218ddeb306fb7ef148691e6f11cde82202f66101afb1a0b8b15d9d8703b9e85e4d4465b2584c404a4d7d0a1e45a7b2d11e6cc278c6c28995320cfa0eec943c594f82e3d8eb70904f404d719f91ca405942bc8ccd212e1baaa45c39b76540ff66b0dfd5a52c35670b6f81feafd93217ebaeea55df9168f2e6e409ea80e84e72187a964bd4943bf4fc6d8a30f32c7826c36c1b6b347476b28db806bec632f7227bb5c560a68c77d3bd33f950abdc448efe558a8496053e8876f116303470f258e93a4f25ac5bbdf77f68e434a25fa9c082142510e060912fa06a5e4f826b99743b6fce6e216b9b17116083b71a73796566a3e48dbf1883ec3815671c7d771dd44f96b7f0fcd72fda608f8f790b832e1c9f9e472e2f2dd961a7c85386cc6eacd944f16823c9e2192ffc10cbe37b229e60919886552e805ce6833c6361a36991afcdb7e3c17fcdb2db649dc22dcfe8fa700d62e0ac487e97ac441c7a3654764ec5d7ddda0f2f981a12112817697f3ed9fa46ace38323c2c64035df707e81d351afebcc2d4b25b5f4b843e2593f8bb5a98dd662a30fe107f696a39c4c0b4b25ed3e587cb1e1b044d410a3385e9f5e4c20bc29023419e024d2a526dfed5eec54cce5de187eabd6bd89fcc27e88891ae41be6a16e8d8e8ea4e205eafc22fe2aa3b769e363e5a6f15b42ff720267ae9854bd606af9bd3dfb53bc039bff2a5092af28c384069446490be0e855c3e10cc5e08d390c3bf33a258f6e1bafb622926d793c0ad16b9bb38165ba852a1fa43d49cecca4fe4d7bb6f41e2bda60a0c16c0ad83014c04192fe006d39948b14244b92d5b3f71af887b0f4d03c69cf61e47554dc9d2e918b3193a343fd98e4ad2ad948126e70c8ce4edbbed138d2d36eb59e6d391738479b12a5db7013109db2d98eb4398622ce489e9611f83f99fa50ec582c2fe202cd69468bfb51a845d6e10deb9d0566468114f97f02ee508eb4ff7206049f4b876cf8d7e946258bee04b8de8d381e6ca894c87e4e4d3fa070d0dc5909615966346147ba5222ca99ee63653d162a92da8ac5fedf2a2b681dd0b788c12de19f772916306a63ca63276947955fd62cd73e17190e9b2a4b779457e96bf4257db83966635b619f85e376dd8483eac4f20749ce1f067c8c2412955aef886f2698e3330814bcabad128f353d3af457dbef744d96c8b4cf5216944961a9f220a1b2a0ba038dd2f9849824aa9ce94eeaf00882e93ccce8a950b17cb595513833f737e4eba36220e208cdd7f134f39f5230c10b99b8c0ddf031262856964d01248ce855d953eaa21a0e53c4c3a437bc7eac41169fef65ae059f0a830dec5251176251dbdb3e245b1419072cf061b6cc68e144ee898234508c0bbc1c65c1bd7537606099ce4874b203a3f431f7f4532a1be4cf1ae74c9704579b6a19513d8aaf60784c07d122f777d09f6f0f78b10906281f7a024ba02b5a4a5a88ad185e4924e43c2ae9cd0c3f87aa71e7d56456d661e50f0999aeead4e0d9f04477f951d9a7820578a9713d2204ad7de76702176d4726f77b5643ae01d1faa6f0ce92c12c6544fa8b0847c1ad5cfb185df78c9f259afee6824fe9c64f810d1f03f6405a531be14879348dcaa868ac3ac66bf1dfb4f5757dc60499d9e0dde7d626e9a261d5b50b5d08f11069fa63cbf0ae5fbce1ba714cb762ac4cf45c62630eee803e83161c31c388ee35316a9731b8d3082be2998d3a5f74c04c940c6336c2ea4fffc3d07c6ad62a6c16d11d47065ce69981b39bd3f61b99f6cc8c910348159c33dbe2453f823814b11da4a5ed9042fd126f382e988afd8db25e5237e0f6e37dbf8e2db08b1c2caeb599b8a903439070148b1d0727b22c4a979251d4add5e7a1884645332f7b56687fde10328f42fcbaee565cc706cdaca84324372bf12ec8d5f537c9902e750886e28f59de6c35b50a2827da567c4b71d1b91f50c04887468fe25f65fb29b07caecbb64d11a12093028ad3c4de3dd0d35fb2f2acc124f4c04d5bc6e158142c0e50f90cbe969c8afa655c26ed663d90ead14697d91ec9b5e284e7c166d3db230f681cbfdac745f6fb33892d17d1f10c3a46621b022a13f7f32588ad8d2acd7472446063aec4ee7bf49adb74f35322ad2bd1b424d7af0d882c8fd2657a049913ec41734aa73eab01abda5fe803aec3ebc34eb4a08352ab8c9ad5fafec19935faecd958f072bd5c09fe006e2144fa297c510b3847ce19250efface5d638923e8812b608d00713e851ca29998ca97f4f143a614fbc75248a2abd161c1bd10c278f19b479761bbf0c809dc85eb640cfb84dff0ad282aab428c6ce522276710f4ab8766baec54ee86aba6f1bf44925d7e038ca165db68b3dfb91650afbdcbd7c5043597cc0f014b17e92dc375f7334288f1ba754a4a70e8081337bb8f81d5342ab381bf31908452619d203da1186f6f1d2c1b54f41e2ff5bd464fae173d38033b349756ed43cc36ac65ebe6f27685272904b3a76ee4a548cacc492ee4d4d5aa85e7fb62ce22e1f3b7b0e268c3cb41ffb415076888e77a71991b9e03c08e2fe2fd09764b183e60b1a94646f92f1ed884ec3957fad25fcfcd5e42ef44e0021f1b154ff96cd121965051f7c8aced9e95adf962a22097295710a6bfdee0e058bc1d8f17728fb7ef45252b4dd27cf85543a6997250ccc02dbbe0ca5effe5d568c66dbdbe4fca4a49b3bbdf7b936d2ed3f8d98b176f30dfdf099fcbe525bf762497c5553369139e46de91a80e85c436158a3c43a0cebaca1081c15d04778c17f190362ad87a299d40e857ac6464da3e0d273df9e2d19c50279d88dbd5061f639778210b24f6070f59ef4a07c777775c538b1be048699386180fde85f969c1a3608c076aeaeac3373ace0e1179739ef052aa388493950fcc4cb3ce8f15d931e4da387fb1e40b89338694efd008ced796920b4ef2c1aedd6dc86002f128789f8307f1855c335e9d010c4b1eb41d8b9cfb2f385246e80d15ae1f9b8728d4c0c5d3443edf3e3826b955419c41c1c07d84de6092a95b4c4c5dd9c02470def4fa322ce46ed706080002005e0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="280001801400020065727370616e3000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x1194}, 0x1, 0x0, 0x0, 0x20000000}, 0x844) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xf000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) r5 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0xc10000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f00000001c0)={{0x2, 0x0, @descriptor="d4d36af7f77d4d70"}}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x250000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000009e000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005001c"], 0x44}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x3f, 0x6, @random='26:pd-'}, 0x14) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x10) 22:13:28 executing program 2: unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) 22:13:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) sync_file_range(r2, 0x100000001, 0x4, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:28 executing program 2 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x34000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0285629, &(0x7f0000000240)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0}}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r4 = dup(r3) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:13:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x400300, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 471.294214][T18383] FAULT_INJECTION: forcing a failure. [ 471.294214][T18383] name failslab, interval 1, probability 0, space 0, times 0 [ 471.359928][T18383] CPU: 0 PID: 18383 Comm: syz-executor.2 Not tainted 5.9.0-rc7-syzkaller #0 [ 471.368671][T18383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.378735][T18383] Call Trace: [ 471.382101][T18383] dump_stack+0x198/0x1fd [ 471.386457][T18383] should_fail.cold+0x5/0x14 [ 471.391070][T18383] should_failslab+0x5/0xf [ 471.395508][T18383] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 471.401597][T18383] kmem_cache_alloc_node+0x50/0x430 22:13:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 471.406819][T18383] __alloc_skb+0x71/0x550 [ 471.411174][T18383] netlink_sendmsg+0x94f/0xd90 [ 471.415969][T18383] ? netlink_unicast+0x7d0/0x7d0 [ 471.420939][T18383] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 471.426241][T18383] ? netlink_unicast+0x7d0/0x7d0 [ 471.431303][T18383] sock_sendmsg+0xcf/0x120 [ 471.435762][T18383] ____sys_sendmsg+0x6e8/0x810 [ 471.440562][T18383] ? kernel_sendmsg+0x50/0x50 [ 471.445252][T18383] ? do_recvmmsg+0x6d0/0x6d0 [ 471.449862][T18383] ? lockdep_hardirqs_on_prepare+0x530/0x530 22:13:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 471.455854][T18383] ? lock_downgrade+0x830/0x830 [ 471.460719][T18383] ? _parse_integer+0x132/0x180 [ 471.465694][T18383] ___sys_sendmsg+0xf3/0x170 [ 471.470297][T18383] ? sendmsg_copy_msghdr+0x160/0x160 [ 471.475594][T18383] ? __fget_files+0x272/0x400 [ 471.480302][T18383] ? lock_downgrade+0x830/0x830 [ 471.486052][T18383] ? lock_is_held_type+0xbb/0xf0 [ 471.491011][T18383] ? find_held_lock+0x2d/0x110 [ 471.495819][T18383] ? __fget_files+0x294/0x400 [ 471.500516][T18383] ? __fget_light+0xea/0x280 [ 471.505123][T18383] __sys_sendmsg+0xe5/0x1b0 22:13:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 471.509665][T18383] ? __sys_sendmsg_sock+0xb0/0xb0 [ 471.514724][T18383] ? check_preemption_disabled+0x50/0x130 [ 471.520461][T18383] ? syscall_enter_from_user_mode+0x1d/0x60 [ 471.526374][T18383] do_syscall_64+0x2d/0x70 [ 471.530802][T18383] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.536701][T18383] RIP: 0033:0x45de89 [ 471.540607][T18383] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:13:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:29 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x1}, 0x8) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f00000000c0)) [ 471.560263][T18383] RSP: 002b:00007fa82278dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.568688][T18383] RAX: ffffffffffffffda RBX: 000000000002b7c0 RCX: 000000000045de89 [ 471.576674][T18383] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 471.584663][T18383] RBP: 00007fa82278dca0 R08: 0000000000000000 R09: 0000000000000000 [ 471.592642][T18383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.600621][T18383] R13: 000000000169fb6f R14: 00007fa82278e9c0 R15: 000000000118bf2c 22:13:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:29 executing program 2 (fault-call:6 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 471.915639][T18415] FAULT_INJECTION: forcing a failure. [ 471.915639][T18415] name failslab, interval 1, probability 0, space 0, times 0 [ 471.929080][T18415] CPU: 0 PID: 18415 Comm: syz-executor.2 Not tainted 5.9.0-rc7-syzkaller #0 [ 471.937763][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.947827][T18415] Call Trace: [ 471.951140][T18415] dump_stack+0x198/0x1fd [ 471.955490][T18415] should_fail.cold+0x5/0x14 [ 471.960105][T18415] should_failslab+0x5/0xf [ 471.964547][T18415] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 471.970636][T18415] kmem_cache_alloc_node_trace+0x55/0x430 [ 471.976375][T18415] ? __alloc_skb+0x71/0x550 [ 471.980934][T18415] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 471.986494][T18415] ? kmem_cache_alloc_node+0x38d/0x430 [ 471.991975][T18415] __kmalloc_node_track_caller+0x38/0x60 [ 471.997625][T18415] __alloc_skb+0xae/0x550 [ 472.001987][T18415] netlink_sendmsg+0x94f/0xd90 [ 472.006778][T18415] ? netlink_unicast+0x7d0/0x7d0 [ 472.011748][T18415] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 472.017079][T18415] ? netlink_unicast+0x7d0/0x7d0 [ 472.022042][T18415] sock_sendmsg+0xcf/0x120 [ 472.026481][T18415] ____sys_sendmsg+0x6e8/0x810 [ 472.031267][T18415] ? kernel_sendmsg+0x50/0x50 [ 472.035958][T18415] ? do_recvmmsg+0x6d0/0x6d0 [ 472.040567][T18415] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 472.046569][T18415] ? lock_downgrade+0x830/0x830 [ 472.051432][T18415] ? _parse_integer+0x132/0x180 [ 472.056309][T18415] ___sys_sendmsg+0xf3/0x170 [ 472.060919][T18415] ? sendmsg_copy_msghdr+0x160/0x160 [ 472.066231][T18415] ? __fget_files+0x272/0x400 [ 472.070922][T18415] ? lock_downgrade+0x830/0x830 [ 472.075791][T18415] ? lock_is_held_type+0xbb/0xf0 [ 472.080830][T18415] ? find_held_lock+0x2d/0x110 [ 472.085649][T18415] ? __fget_files+0x294/0x400 [ 472.090366][T18415] ? __fget_light+0xea/0x280 [ 472.094977][T18415] __sys_sendmsg+0xe5/0x1b0 [ 472.099490][T18415] ? __sys_sendmsg_sock+0xb0/0xb0 [ 472.104537][T18415] ? check_preemption_disabled+0x50/0x130 [ 472.110272][T18415] ? syscall_enter_from_user_mode+0x1d/0x60 [ 472.116188][T18415] do_syscall_64+0x2d/0x70 [ 472.120723][T18415] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.126618][T18415] RIP: 0033:0x45de89 [ 472.130525][T18415] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.150138][T18415] RSP: 002b:00007fa82278dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.158560][T18415] RAX: ffffffffffffffda RBX: 000000000002b7c0 RCX: 000000000045de89 22:13:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x400001, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'vlan1\x00', {0xffffff9c}, 0xfffc}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000200)) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x10}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 472.166544][T18415] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 472.174528][T18415] RBP: 00007fa82278dca0 R08: 0000000000000000 R09: 0000000000000000 [ 472.182526][T18415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.190523][T18415] R13: 000000000169fb6f R14: 00007fa82278e9c0 R15: 000000000118bf2c 22:13:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x1000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x3f00}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x359e00) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000040)=""/30) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:30 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:30 executing program 2 (fault-call:6 fault-nth:2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:30 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x3000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 472.764216][T18452] FAULT_INJECTION: forcing a failure. [ 472.764216][T18452] name failslab, interval 1, probability 0, space 0, times 0 [ 472.828693][T18452] CPU: 1 PID: 18452 Comm: syz-executor.2 Not tainted 5.9.0-rc7-syzkaller #0 [ 472.837393][T18452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.847463][T18452] Call Trace: [ 472.850769][T18452] dump_stack+0x198/0x1fd [ 472.855116][T18452] should_fail.cold+0x5/0x14 [ 472.859730][T18452] ? netlink_deliver_tap+0x146/0xb70 [ 472.865032][T18452] should_failslab+0x5/0xf [ 472.869457][T18452] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 472.875546][T18452] kmem_cache_alloc+0x46/0x3f0 [ 472.880341][T18452] skb_clone+0x14f/0x3c0 [ 472.884604][T18452] netlink_deliver_tap+0x990/0xb70 [ 472.889742][T18452] netlink_unicast+0x5e5/0x7d0 [ 472.894531][T18452] ? netlink_attachskb+0x810/0x810 [ 472.899733][T18452] ? __phys_addr_symbol+0x2c/0x70 [ 472.904772][T18452] ? __check_object_size+0x171/0x3e4 [ 472.910082][T18452] netlink_sendmsg+0x856/0xd90 [ 472.914870][T18452] ? netlink_unicast+0x7d0/0x7d0 [ 472.919838][T18452] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 472.925157][T18452] ? netlink_unicast+0x7d0/0x7d0 [ 472.930122][T18452] sock_sendmsg+0xcf/0x120 [ 472.934557][T18452] ____sys_sendmsg+0x6e8/0x810 [ 472.939341][T18452] ? kernel_sendmsg+0x50/0x50 [ 472.944025][T18452] ? do_recvmmsg+0x6d0/0x6d0 [ 472.948640][T18452] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 472.954629][T18452] ? lock_downgrade+0x830/0x830 [ 472.959499][T18452] ? _parse_integer+0x132/0x180 [ 472.964399][T18452] ___sys_sendmsg+0xf3/0x170 [ 472.969004][T18452] ? sendmsg_copy_msghdr+0x160/0x160 [ 472.974298][T18452] ? __fget_files+0x272/0x400 [ 472.978988][T18452] ? lock_downgrade+0x830/0x830 [ 472.983846][T18452] ? lock_is_held_type+0xbb/0xf0 [ 472.988876][T18452] ? find_held_lock+0x2d/0x110 [ 472.993659][T18452] ? __fget_files+0x294/0x400 [ 472.998348][T18452] ? __fget_light+0xea/0x280 [ 473.002953][T18452] __sys_sendmsg+0xe5/0x1b0 [ 473.007498][T18452] ? __sys_sendmsg_sock+0xb0/0xb0 [ 473.012546][T18452] ? check_preemption_disabled+0x50/0x130 [ 473.018272][T18452] ? syscall_enter_from_user_mode+0x1d/0x60 [ 473.024180][T18452] do_syscall_64+0x2d/0x70 22:13:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) bind$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10) r4 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x80000001}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 473.029561][T18452] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.035460][T18452] RIP: 0033:0x45de89 [ 473.039360][T18452] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.058979][T18452] RSP: 002b:00007fa82278dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.067401][T18452] RAX: ffffffffffffffda RBX: 000000000002b7c0 RCX: 000000000045de89 [ 473.075732][T18452] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 473.083709][T18452] RBP: 00007fa82278dca0 R08: 0000000000000000 R09: 0000000000000000 [ 473.091687][T18452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.099691][T18452] R13: 000000000169fb6f R14: 00007fa82278e9c0 R15: 000000000118bf2c 22:13:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:30 executing program 2 (fault-call:6 fault-nth:3): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:30 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x2}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 473.379607][T18473] FAULT_INJECTION: forcing a failure. [ 473.379607][T18473] name failslab, interval 1, probability 0, space 0, times 0 22:13:30 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x6000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 473.449048][T18473] CPU: 0 PID: 18473 Comm: syz-executor.2 Not tainted 5.9.0-rc7-syzkaller #0 [ 473.457761][T18473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.467826][T18473] Call Trace: [ 473.471135][T18473] dump_stack+0x198/0x1fd [ 473.475492][T18473] should_fail.cold+0x5/0x14 [ 473.480111][T18473] ? genl_family_rcv_msg_attrs_parse.isra.0+0xb5/0x250 [ 473.486988][T18473] should_failslab+0x5/0xf [ 473.491429][T18473] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 473.497545][T18473] __kmalloc+0x6f/0x360 [ 473.505146][T18473] genl_family_rcv_msg_attrs_parse.isra.0+0xb5/0x250 [ 473.511839][T18473] genl_rcv_msg+0x4a3/0x980 [ 473.516370][T18473] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 473.523717][T18473] ? lock_acquire+0x1f3/0xaf0 [ 473.528411][T18473] ? genl_rcv+0x15/0x40 [ 473.532586][T18473] ? lock_release+0x8f0/0x8f0 [ 473.537349][T18473] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 473.542664][T18473] netlink_rcv_skb+0x15a/0x430 22:13:31 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x600001, 0x41) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000001c0)={r2, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 473.547446][T18473] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 473.554406][T18473] ? netlink_ack+0xa10/0xa10 [ 473.559027][T18473] genl_rcv+0x24/0x40 [ 473.563025][T18473] netlink_unicast+0x533/0x7d0 [ 473.567809][T18473] ? netlink_attachskb+0x810/0x810 [ 473.572936][T18473] ? __phys_addr_symbol+0x2c/0x70 [ 473.577972][T18473] ? __check_object_size+0x171/0x3e4 [ 473.583272][T18473] netlink_sendmsg+0x856/0xd90 [ 473.588749][T18473] ? netlink_unicast+0x7d0/0x7d0 [ 473.594277][T18473] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 473.599572][T18473] ? netlink_unicast+0x7d0/0x7d0 [ 473.604533][T18473] sock_sendmsg+0xcf/0x120 [ 473.608959][T18473] ____sys_sendmsg+0x6e8/0x810 [ 473.613769][T18473] ? kernel_sendmsg+0x50/0x50 [ 473.618459][T18473] ? do_recvmmsg+0x6d0/0x6d0 [ 473.623069][T18473] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 473.629057][T18473] ? lock_downgrade+0x830/0x830 [ 473.633916][T18473] ? _parse_integer+0x132/0x180 [ 473.638786][T18473] ___sys_sendmsg+0xf3/0x170 [ 473.643392][T18473] ? sendmsg_copy_msghdr+0x160/0x160 22:13:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8002, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000001b80)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000440)={0x2, 0x3, @start={r5, 0x0, "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", "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"}, [0x2, 0x8, 0x2, 0x1f, 0xfffffffffffffff8, 0x9, 0x1, 0x1, 0x1, 0x8, 0xae4, 0x1000, 0x0, 0xfff, 0x7fff, 0x3, 0x5b000000000, 0x5, 0x0, 0x401, 0x10001, 0x1f, 0x3ff, 0x6, 0x9, 0x9, 0x9, 0xd5, 0x80000000, 0x5, 0x9, 0x9, 0x7, 0x401, 0x6, 0x80000000, 0x2, 0xfff, 0x0, 0x7ff, 0x95, 0x0, 0x6, 0x5, 0x0, 0x4c8a, 0x9, 0x8, 0x1, 0x4800000000000000, 0x6, 0xffffffffffffffff, 0x61e91916, 0x7, 0x3, 0x3, 0x7, 0x6, 0x8, 0xab, 0x7fff, 0x2dfa6f22, 0x0, 0x1b0a]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000b80)={{r4}, 0x0, 0x2, @unused=[0x3, 0x2, 0xffffffffffffffc0, 0x5], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000002c0)={0x0, 0x2, {0xfff, @usage=0x8, 0x0, 0x20000, 0xe0, 0x9, 0x80, 0x5, 0x20, @usage=0x2, 0x8, 0x2b54, [0x7ff, 0x5, 0x6f95, 0x1000, 0x4, 0x3f4d]}, {0xc1a, @struct={0x7, 0x4}, 0x0, 0xff, 0x1, 0x2, 0x4, 0x7f, 0x80, @struct={0x22, 0x607001b}, 0x1, 0xff, [0x0, 0x4, 0x2c, 0x1, 0x1, 0x2c52dcb9]}, {0xa4a, @usage=0x93, 0x0, 0x800, 0xae5, 0x8, 0x81, 0x1ff, 0x0, @struct={0x7, 0x16fc}, 0x9, 0x8, [0x8000, 0x4, 0x0, 0x200, 0x1, 0xafc]}, {0x7f, 0x9, 0x80000001}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000006c0)={0x18, 0x4, {0x7fffffff, @struct={0x0, 0x7}, 0x0, 0x7fff, 0x9, 0x2, 0xffffffffffffffb6, 0x5, 0x418, @struct={0xffffffff, 0x8}, 0x6, 0x7, [0x1, 0x81, 0xba6, 0x521f, 0xcb76ba, 0x100]}, {0x6, @usage=0x100, r5, 0x4, 0xc384, 0xb1, 0x8080000000, 0x2, 0xa0, @struct={0x5, 0xfffffffa}, 0x9, 0x1, [0x9, 0x800, 0x2, 0x5, 0x1, 0xc9]}, {0x8, @usage=0x1, r6, 0x6, 0x3ff, 0xffffffffffffff7f, 0x7, 0x9, 0x0, @struct={0x7}, 0x7ff, 0x2, [0x0, 0x8, 0x8, 0x2, 0x10001, 0x9197]}, {0x446, 0xfffffffffffff0e8, 0x4}}) fcntl$dupfd(r3, 0x0, r3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8200, 0x168) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000020) r7 = socket$can_raw(0x1d, 0x3, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000002030108000000000000000003000009080003400060349ab00c1551fc00040000000340000000030cf3e8000200ffffffff2b2e80b40c000900fffffffc000000170c000200"], 0x48}, 0x1, 0x0, 0x0, 0x24048804}, 0x20040841) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x10) [ 473.648692][T18473] ? __fget_files+0x272/0x400 [ 473.653382][T18473] ? lock_downgrade+0x830/0x830 [ 473.658251][T18473] ? lock_is_held_type+0xbb/0xf0 [ 473.663198][T18473] ? find_held_lock+0x2d/0x110 [ 473.667982][T18473] ? __fget_files+0x294/0x400 [ 473.672680][T18473] ? __fget_light+0xea/0x280 [ 473.677308][T18473] __sys_sendmsg+0xe5/0x1b0 [ 473.681823][T18473] ? __sys_sendmsg_sock+0xb0/0xb0 [ 473.686874][T18473] ? check_preemption_disabled+0x50/0x130 [ 473.692634][T18473] ? syscall_enter_from_user_mode+0x1d/0x60 [ 473.698652][T18473] do_syscall_64+0x2d/0x70 [ 473.703078][T18473] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.708997][T18473] RIP: 0033:0x45de89 [ 473.712900][T18473] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.732517][T18473] RSP: 002b:00007fa82278dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.740944][T18473] RAX: ffffffffffffffda RBX: 000000000002b7c0 RCX: 000000000045de89 [ 473.748925][T18473] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 473.756910][T18473] RBP: 00007fa82278dca0 R08: 0000000000000000 R09: 0000000000000000 [ 473.764907][T18473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 473.772891][T18473] R13: 000000000169fb6f R14: 00007fa82278e9c0 R15: 000000000118bf2c 22:13:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x8}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) pwrite64(r2, &(0x7f0000000000)="e50080f7b07bbe573ba6df38a4d32b7cc4f80378857bcade0af37a7ca70d4e68c82fbe5a73f165b3426cbfb675388cc4cb05ff93e7ab0acea32232120cc62a65d423fc6faef2b0c51d10821b9a02aaae1ddc66a8e3d2def353a52654c62651c82425591eb734818ce7d71fb6ae0c6e4b6a", 0x71, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000840)='/dev/vcsu#\x00', 0x0, 0x18000) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000880)={0x0, 0x4, 0x0, 0x6, r4}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r2}) 22:13:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:31 executing program 2 (fault-call:6 fault-nth:4): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, {0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x2000, 0x2000, 0xfffc, 0x6, 0xffff, "196624e919ec0001000098ba0c398293e624f2fbf800"}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000480)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="8907000000006f909ae7c910ff02000000000000000000000000000107100000000102ff000101f8ffffffffffffc2040000000900"/64], 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r9, 0x0, r10) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1) fcntl$dupfd(r8, 0x0, r7) 22:13:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x10}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x8001, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000140)=0xa1, 0x4) r3 = dup(r0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x16, 0xfffffe02, @l2={'eth', 0x3a, 'netpci0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) 22:13:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x9000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 474.173176][T18504] FAULT_INJECTION: forcing a failure. [ 474.173176][T18504] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 474.185087][T18505] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 474.187451][T18504] CPU: 1 PID: 18504 Comm: syz-executor.2 Not tainted 5.9.0-rc7-syzkaller #0 [ 474.187481][T18504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.215641][T18504] Call Trace: [ 474.218950][T18504] dump_stack+0x198/0x1fd [ 474.223301][T18504] should_fail.cold+0x5/0x14 [ 474.227917][T18504] ? netlink_unicast+0x5e5/0x7d0 [ 474.232949][T18504] __alloc_pages_nodemask+0x183/0x790 [ 474.238382][T18504] ? __alloc_pages_slowpath.constprop.0+0x28c0/0x28c0 [ 474.245164][T18504] ? lock_is_held_type+0xbb/0xf0 [ 474.250192][T18504] ? fs_reclaim_release+0x90/0xd0 [ 474.255274][T18504] cache_grow_begin+0x71/0x4a0 [ 474.260065][T18504] cache_alloc_refill+0x27f/0x380 [ 474.265108][T18504] ? lockdep_hardirqs_off+0x96/0xd0 [ 474.270334][T18504] ? genl_family_rcv_msg_attrs_parse.isra.0+0xb5/0x250 [ 474.277192][T18504] __kmalloc+0x2f9/0x360 [ 474.281477][T18504] genl_family_rcv_msg_attrs_parse.isra.0+0xb5/0x250 [ 474.288171][T18504] genl_rcv_msg+0x4a3/0x980 [ 474.292697][T18504] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 474.299650][T18504] ? lock_acquire+0x1f3/0xaf0 [ 474.304369][T18504] ? genl_rcv+0x15/0x40 [ 474.308546][T18504] ? lock_release+0x8f0/0x8f0 [ 474.313236][T18504] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 474.318540][T18504] netlink_rcv_skb+0x15a/0x430 [ 474.323319][T18504] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 474.330276][T18504] ? netlink_ack+0xa10/0xa10 [ 474.334910][T18504] genl_rcv+0x24/0x40 [ 474.341426][T18504] netlink_unicast+0x533/0x7d0 [ 474.346209][T18504] ? netlink_attachskb+0x810/0x810 [ 474.351335][T18504] ? __phys_addr_symbol+0x2c/0x70 [ 474.356452][T18504] ? __check_object_size+0x171/0x3e4 [ 474.361750][T18504] netlink_sendmsg+0x856/0xd90 [ 474.366534][T18504] ? netlink_unicast+0x7d0/0x7d0 [ 474.371495][T18504] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 474.376804][T18504] ? netlink_unicast+0x7d0/0x7d0 [ 474.381755][T18504] sock_sendmsg+0xcf/0x120 [ 474.386202][T18504] ____sys_sendmsg+0x6e8/0x810 [ 474.391013][T18504] ? kernel_sendmsg+0x50/0x50 [ 474.395696][T18504] ? do_recvmmsg+0x6d0/0x6d0 [ 474.400306][T18504] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 474.406294][T18504] ? lock_downgrade+0x830/0x830 [ 474.411155][T18504] ? _parse_integer+0x132/0x180 [ 474.416022][T18504] ___sys_sendmsg+0xf3/0x170 [ 474.420648][T18504] ? sendmsg_copy_msghdr+0x160/0x160 [ 474.425950][T18504] ? __fget_files+0x272/0x400 [ 474.430669][T18504] ? lock_downgrade+0x830/0x830 [ 474.435530][T18504] ? lock_is_held_type+0xbb/0xf0 [ 474.440480][T18504] ? find_held_lock+0x2d/0x110 [ 474.445264][T18504] ? __fget_files+0x294/0x400 [ 474.449956][T18504] ? __fget_light+0xea/0x280 [ 474.454561][T18504] __sys_sendmsg+0xe5/0x1b0 [ 474.459095][T18504] ? __sys_sendmsg_sock+0xb0/0xb0 [ 474.464245][T18504] ? check_preemption_disabled+0x50/0x130 [ 474.469972][T18504] ? syscall_enter_from_user_mode+0x1d/0x60 [ 474.475887][T18504] do_syscall_64+0x2d/0x70 [ 474.480318][T18504] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.486214][T18504] RIP: 0033:0x45de89 [ 474.490117][T18504] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.509766][T18504] RSP: 002b:00007fa82278dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 22:13:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x3f00}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 474.518284][T18504] RAX: ffffffffffffffda RBX: 000000000002b7c0 RCX: 000000000045de89 [ 474.526264][T18504] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 474.534242][T18504] RBP: 00007fa82278dca0 R08: 0000000000000000 R09: 0000000000000000 [ 474.542263][T18504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 474.550527][T18504] R13: 000000000169fb6f R14: 00007fa82278e9c0 R15: 000000000118bf2c 22:13:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xa000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:32 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa692f4d19f55dffa}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1ff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xb6cf}, {0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa83}, {0x6, 0x11, 0xf544}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xf49}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x6d}}]}, 0xfc}}, 0x20040081) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffffa5) 22:13:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:32 executing program 2 (fault-call:6 fault-nth:5): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) [ 475.103769][T18537] FAULT_INJECTION: forcing a failure. [ 475.103769][T18537] name failslab, interval 1, probability 0, space 0, times 0 [ 475.148084][T18537] CPU: 1 PID: 18537 Comm: syz-executor.2 Not tainted 5.9.0-rc7-syzkaller #0 [ 475.156789][T18537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.166851][T18537] Call Trace: [ 475.170164][T18537] dump_stack+0x198/0x1fd [ 475.174518][T18537] should_fail.cold+0x5/0x14 [ 475.179126][T18537] should_failslab+0x5/0xf [ 475.183584][T18537] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 475.189663][T18537] kmem_cache_alloc_node+0x50/0x430 [ 475.194939][T18537] ? nl80211_pre_doit+0x34f/0x630 [ 475.199989][T18537] __alloc_skb+0x71/0x550 [ 475.204370][T18537] nl80211_get_wiphy+0xb5/0x2c0 [ 475.209244][T18537] ? nl80211_dump_wiphy+0x760/0x760 [ 475.214496][T18537] ? nl80211_pre_doit+0xa2/0x630 [ 475.219547][T18537] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 475.226331][T18537] genl_rcv_msg+0x61d/0x980 [ 475.230856][T18537] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 475.237810][T18537] ? do_raw_spin_unlock+0x171/0x230 [ 475.243108][T18537] ? lock_release+0x8f0/0x8f0 [ 475.247801][T18537] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 475.253109][T18537] netlink_rcv_skb+0x15a/0x430 [ 475.257900][T18537] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 475.264863][T18537] ? netlink_ack+0xa10/0xa10 [ 475.269484][T18537] genl_rcv+0x24/0x40 [ 475.273908][T18537] netlink_unicast+0x533/0x7d0 [ 475.278698][T18537] ? netlink_attachskb+0x810/0x810 [ 475.283826][T18537] ? __phys_addr_symbol+0x2c/0x70 [ 475.288873][T18537] ? __check_object_size+0x171/0x3e4 [ 475.294188][T18537] netlink_sendmsg+0x856/0xd90 [ 475.298966][T18537] ? netlink_unicast+0x7d0/0x7d0 [ 475.303925][T18537] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 475.309227][T18537] ? netlink_unicast+0x7d0/0x7d0 [ 475.314172][T18537] sock_sendmsg+0xcf/0x120 [ 475.318597][T18537] ____sys_sendmsg+0x6e8/0x810 [ 475.323374][T18537] ? kernel_sendmsg+0x50/0x50 [ 475.328055][T18537] ? do_recvmmsg+0x6d0/0x6d0 [ 475.332663][T18537] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 475.338654][T18537] ? lock_downgrade+0x830/0x830 [ 475.343516][T18537] ? _parse_integer+0x132/0x180 [ 475.348385][T18537] ___sys_sendmsg+0xf3/0x170 [ 475.353006][T18537] ? sendmsg_copy_msghdr+0x160/0x160 [ 475.358317][T18537] ? __fget_files+0x272/0x400 [ 475.363003][T18537] ? lock_downgrade+0x830/0x830 [ 475.367878][T18537] ? lock_is_held_type+0xbb/0xf0 [ 475.372823][T18537] ? find_held_lock+0x2d/0x110 [ 475.377609][T18537] ? __fget_files+0x294/0x400 [ 475.382300][T18537] ? __fget_light+0xea/0x280 [ 475.386900][T18537] __sys_sendmsg+0xe5/0x1b0 [ 475.391411][T18537] ? __sys_sendmsg_sock+0xb0/0xb0 [ 475.396464][T18537] ? check_preemption_disabled+0x50/0x130 [ 475.402203][T18537] ? syscall_enter_from_user_mode+0x1d/0x60 [ 475.408132][T18537] do_syscall_64+0x2d/0x70 [ 475.412558][T18537] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.418456][T18537] RIP: 0033:0x45de89 [ 475.422357][T18537] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.441975][T18537] RSP: 002b:00007fa82278dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.450402][T18537] RAX: ffffffffffffffda RBX: 000000000002b7c0 RCX: 000000000045de89 [ 475.458413][T18537] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 475.466425][T18537] RBP: 00007fa82278dca0 R08: 0000000000000000 R09: 0000000000000000 [ 475.474408][T18537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 475.482392][T18537] R13: 000000000169fb6f R14: 00007fa82278e9c0 R15: 000000000118bf2c 22:13:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x11e8, 0x14, 0x100, 0x70bd29, 0x25dfdbfe, {0x4}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "1362c04320c3333f364a0305f5f748dc175cdcc2c98301b5bf0f8951bb19c40ba8042b5ebefaa0fdf4ab325f983fe76e9c6be13c9d128ca7e2cebf0af796f382f697eaac736120cf7b0235995a09a35ac321ec5e380b4d2451457065d57ac0196200cff0a3f7fd3200abbef3ba1f9cfc65ac76a0c76c4bfaef0f4877fcc05e132872d75930421548f0d1aa2ab250f4a6b19f72757db34935d8f2162fc406f3e3"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "0a7e7c5b6b17d49c0ded738cfeb583924bb5f7d5a1a75552a9d6c90488ee0c8f1326986658de039b5467f8"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "1ad073ecb643967af4e77c86"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "aa2f5bf7b003e86e870f8a74f4292293244a70ed7f357a79297c035ef829e22aec2949669409abc20711d16bb6875943e8537af3e81e7e9cfe55f783eb74f129af3f1f8beb1fb3329570c3292c8b8f2face356c3af9526f6b221871e802bb5dd82ed05f2203f6d9b7b4b0217c132b90d89d5a76a64209a165ca037db30792c87dd0e6f434bd18168546618731d7b7bcaf5e3e926cfdf166846f5c255db4024bbc59a1679fd8b4587b16a2b1679a5b679fd89fb26261afa354dee7a6f41b99fa253c582144bf120ef40addbcf8bd2cd9d77724793eecdfeea89c31b1833190237b58bb065a5f229"}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x4008801}, 0x88c4) 22:13:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0xc4c92b99b649ddc8, 0x70, 0x3, 0x1, 0x2, 0x5, 0x0, 0x1, 0x8800, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9d, 0x2, @perf_config_ext={0x8, 0x100000000}, 0x0, 0x2, 0xffffffff, 0x0, 0x978, 0x8, 0x1b}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x503202) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1cfd}, 0x8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x5, 0x0, 0x401, 0x5, 0x4}}) 22:13:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x4000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4082, 0xff2}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:33 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xc000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:33 executing program 2 (fault-call:6 fault-nth:6): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) [ 476.371891][T18549] FAULT_INJECTION: forcing a failure. [ 476.371891][T18549] name failslab, interval 1, probability 0, space 0, times 0 22:13:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 476.418902][T18549] CPU: 0 PID: 18549 Comm: syz-executor.2 Not tainted 5.9.0-rc7-syzkaller #0 [ 476.427610][T18549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.437674][T18549] Call Trace: [ 476.440973][T18549] dump_stack+0x198/0x1fd [ 476.445308][T18549] should_fail.cold+0x5/0x14 [ 476.449914][T18549] should_failslab+0x5/0xf [ 476.454343][T18549] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 476.460431][T18549] kmem_cache_alloc_node_trace+0x55/0x430 22:13:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 476.466163][T18549] ? __alloc_skb+0x71/0x550 [ 476.470704][T18549] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 476.476272][T18549] ? kmem_cache_alloc_node+0x38d/0x430 [ 476.481762][T18549] __kmalloc_node_track_caller+0x38/0x60 [ 476.487405][T18549] __alloc_skb+0xae/0x550 [ 476.491754][T18549] nl80211_get_wiphy+0xb5/0x2c0 [ 476.496623][T18549] ? nl80211_dump_wiphy+0x760/0x760 [ 476.501848][T18549] ? nl80211_pre_doit+0xa2/0x630 [ 476.506803][T18549] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 476.513621][T18549] genl_rcv_msg+0x61d/0x980 22:13:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 476.518159][T18549] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 476.525152][T18549] ? lock_release+0x8f0/0x8f0 [ 476.529843][T18549] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 476.535337][T18549] netlink_rcv_skb+0x15a/0x430 [ 476.540113][T18549] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 476.547073][T18549] ? netlink_ack+0xa10/0xa10 [ 476.551697][T18549] genl_rcv+0x24/0x40 [ 476.555717][T18549] netlink_unicast+0x533/0x7d0 [ 476.560498][T18549] ? netlink_attachskb+0x810/0x810 [ 476.565622][T18549] ? __phys_addr_symbol+0x2c/0x70 [ 476.570658][T18549] ? __check_object_size+0x171/0x3e4 [ 476.575962][T18549] netlink_sendmsg+0x856/0xd90 [ 476.580744][T18549] ? netlink_unicast+0x7d0/0x7d0 [ 476.585699][T18549] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 476.590992][T18549] ? netlink_unicast+0x7d0/0x7d0 [ 476.595940][T18549] sock_sendmsg+0xcf/0x120 [ 476.600366][T18549] ____sys_sendmsg+0x6e8/0x810 [ 476.605142][T18549] ? kernel_sendmsg+0x50/0x50 [ 476.609822][T18549] ? do_recvmmsg+0x6d0/0x6d0 [ 476.614424][T18549] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 476.620411][T18549] ? lock_downgrade+0x830/0x830 [ 476.625270][T18549] ? _parse_integer+0x132/0x180 [ 476.630145][T18549] ___sys_sendmsg+0xf3/0x170 [ 476.634754][T18549] ? sendmsg_copy_msghdr+0x160/0x160 [ 476.640069][T18549] ? __fget_files+0x272/0x400 [ 476.644764][T18549] ? lock_downgrade+0x830/0x830 [ 476.649621][T18549] ? lock_is_held_type+0xbb/0xf0 [ 476.654578][T18549] ? find_held_lock+0x2d/0x110 [ 476.659370][T18549] ? __fget_files+0x294/0x400 [ 476.664065][T18549] ? __fget_light+0xea/0x280 [ 476.668680][T18549] __sys_sendmsg+0xe5/0x1b0 [ 476.673193][T18549] ? __sys_sendmsg_sock+0xb0/0xb0 [ 476.678337][T18549] ? check_preemption_disabled+0x50/0x130 [ 476.684090][T18549] ? syscall_enter_from_user_mode+0x1d/0x60 [ 476.690024][T18549] do_syscall_64+0x2d/0x70 [ 476.694458][T18549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.700355][T18549] RIP: 0033:0x45de89 [ 476.704260][T18549] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.724401][T18549] RSP: 002b:00007fa82278dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.732825][T18549] RAX: ffffffffffffffda RBX: 000000000002b7c0 RCX: 000000000045de89 [ 476.740810][T18549] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 476.748790][T18549] RBP: 00007fa82278dca0 R08: 0000000000000000 R09: 0000000000000000 [ 476.756787][T18549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:13:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x56001) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 476.764765][T18549] R13: 000000000169fb6f R14: 00007fa82278e9c0 R15: 000000000118bf2c 22:13:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:34 executing program 2 (fault-call:6 fault-nth:7): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:34 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xc040000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:34 executing program 1: ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f0000000040)={0x0, 0x7, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) setsockopt$inet6_dccp_buf(r6, 0x21, 0xe, &(0x7f0000001100)="992952f47650b58057c1597efca1f41dc0a87d4d9d3eec79dec6fca070141b6a24b6911c9e92b20583f7c37994841254e5da26bb4d412b9c9ef348397461d9e96faa37e172e739", 0x47) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r9) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000900", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040002000000000008000700", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r9, @ANYBLOB="10000300000000002000000000000000"], 0x64, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001180)={0x0, 0xffffffffffffffff}, 0xc) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:34 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x72, &(0x7f0000000200)={r6, 0x4000, 0x0, 0x6, 0x2}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r6, 0xfffffffd, 0x8, 0x401}, &(0x7f0000000040)=0x10) 22:13:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000040)={0x7, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 477.066252][T18585] FAULT_INJECTION: forcing a failure. [ 477.066252][T18585] name failslab, interval 1, probability 0, space 0, times 0 [ 477.115026][T18585] CPU: 1 PID: 18585 Comm: syz-executor.2 Not tainted 5.9.0-rc7-syzkaller #0 [ 477.123744][T18585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.133828][T18585] Call Trace: [ 477.137143][T18585] dump_stack+0x198/0x1fd [ 477.141502][T18585] should_fail.cold+0x5/0x14 [ 477.146169][T18585] ? netlink_deliver_tap+0x146/0xb70 [ 477.151498][T18585] should_failslab+0x5/0xf [ 477.156139][T18585] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 477.162230][T18585] kmem_cache_alloc+0x46/0x3f0 [ 477.167021][T18585] skb_clone+0x14f/0x3c0 [ 477.171322][T18585] netlink_deliver_tap+0x990/0xb70 [ 477.176468][T18585] ? is_vmalloc_addr+0x28/0x40 [ 477.181255][T18585] netlink_unicast+0x697/0x7d0 [ 477.186395][T18585] ? netlink_attachskb+0x810/0x810 [ 477.191593][T18585] ? memset+0x20/0x40 [ 477.195628][T18585] ? __alloc_skb+0x34a/0x550 [ 477.200242][T18585] nl80211_get_wiphy+0x1d7/0x2c0 [ 477.205201][T18585] ? nl80211_dump_wiphy+0x760/0x760 [ 477.210438][T18585] ? nl80211_pre_doit+0xa2/0x630 [ 477.215398][T18585] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 477.222209][T18585] genl_rcv_msg+0x61d/0x980 [ 477.226747][T18585] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 477.233724][T18585] ? lock_release+0x8f0/0x8f0 [ 477.238450][T18585] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 477.244131][T18585] netlink_rcv_skb+0x15a/0x430 [ 477.248937][T18585] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 477.255908][T18585] ? netlink_ack+0xa10/0xa10 [ 477.260552][T18585] genl_rcv+0x24/0x40 [ 477.264579][T18585] netlink_unicast+0x533/0x7d0 [ 477.269392][T18585] ? netlink_attachskb+0x810/0x810 [ 477.274521][T18585] ? __phys_addr_symbol+0x2c/0x70 [ 477.279563][T18585] ? __check_object_size+0x171/0x3e4 [ 477.284870][T18585] netlink_sendmsg+0x856/0xd90 [ 477.289660][T18585] ? netlink_unicast+0x7d0/0x7d0 [ 477.294623][T18585] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 477.299922][T18585] ? netlink_unicast+0x7d0/0x7d0 [ 477.304873][T18585] sock_sendmsg+0xcf/0x120 [ 477.309302][T18585] ____sys_sendmsg+0x6e8/0x810 [ 477.314107][T18585] ? kernel_sendmsg+0x50/0x50 [ 477.318799][T18585] ? do_recvmmsg+0x6d0/0x6d0 [ 477.323850][T18585] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 477.329845][T18585] ? lock_downgrade+0x830/0x830 [ 477.334738][T18585] ? _parse_integer+0x132/0x180 [ 477.339695][T18585] ___sys_sendmsg+0xf3/0x170 [ 477.344298][T18585] ? sendmsg_copy_msghdr+0x160/0x160 [ 477.349590][T18585] ? __fget_files+0x272/0x400 [ 477.354279][T18585] ? lock_downgrade+0x830/0x830 [ 477.359138][T18585] ? lock_is_held_type+0xbb/0xf0 22:13:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xeae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r2, 0x0, 0x8001, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x40980, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) r5 = dup(r0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 477.364082][T18585] ? find_held_lock+0x2d/0x110 [ 477.369123][T18585] ? __fget_files+0x294/0x400 [ 477.373815][T18585] ? __fget_light+0xea/0x280 [ 477.378421][T18585] __sys_sendmsg+0xe5/0x1b0 [ 477.382933][T18585] ? __sys_sendmsg_sock+0xb0/0xb0 [ 477.389585][T18585] ? check_preemption_disabled+0x50/0x130 [ 477.395320][T18585] ? syscall_enter_from_user_mode+0x1d/0x60 [ 477.401236][T18585] do_syscall_64+0x2d/0x70 [ 477.405666][T18585] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.411562][T18585] RIP: 0033:0x45de89 [ 477.415457][T18585] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.435072][T18585] RSP: 002b:00007fa82278dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.443505][T18585] RAX: ffffffffffffffda RBX: 000000000002b7c0 RCX: 000000000045de89 [ 477.452222][T18585] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 477.460204][T18585] RBP: 00007fa82278dca0 R08: 0000000000000000 R09: 0000000000000000 [ 477.468733][T18585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 477.476743][T18585] R13: 000000000169fb6f R14: 00007fa82278e9c0 R15: 000000000118bf2c 22:13:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x3) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 2 (fault-call:6 fault-nth:8): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xe000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x10982, 0x2ec) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_SSID={0x10, 0x34, @random="bb5d0234ef4a689f348c45b6"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ca9be3fc490d"}]}, 0x3c}}, 0x40440c4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x10) 22:13:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2c0800, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x3, 0x0, {0x6d7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x6, 0x10003, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r7, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dlm_plock\x00', 0x200200, 0x0) recvfrom$phonet(r5, &(0x7f0000001300)=""/82, 0x52, 0x10061, &(0x7f0000001380)={0x23, 0x2}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000280)={{r2}, 0x0, 0x2, @unused=[0xfffffffffffffffe, 0x2, 0x4, 0x8], @subvolid=0x1}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x200, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x28000, 0x8, 0x14}, 0x18) ioctl$FICLONE(r6, 0x40049409, 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f0000001280)=[{0xffffffffffffffff, 0x42}], 0x1, 0x0, 0x0, 0x0) 22:13:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xf000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000001100)) splice(r7, 0x0, r8, 0x0, 0x8001, 0x0) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3f}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r4, 0x1f}, 0x8) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x10) 22:13:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x10000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:35 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$P9_RRENAMEAT(r1, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) 22:13:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x78, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @multicast1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4050}, 0x4000040) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x3f000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="594f2892cfa524545e12c0fcd92aa03e13ec6c6b76c16d7e72544352a69bfd75ecfbb98dc170d2d9b8e27ecc8d1b52f136d5195b72b6ff91793cdeab3b1388307641fd6e5436b450170c8dfb003cddfac38f0f95af1ae14c48ca66", 0x5b) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000001180)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f00000011c0)={0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) linkat(r3, &(0x7f0000001100)='./file0\x00', r3, &(0x7f0000001140)='./file0\x00', 0x1000) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x8001, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={@mcast1, 0x7f}) preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x60000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x65580000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') readahead(r6, 0x5, 0xfff) preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:13:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x5f2bf20b12ef3f7f}, 0x4000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000400)=@framed={{}, [@generic={0x4, 0x7, 0xa, 0x3, 0x800}, @ldst={0x2, 0x1, 0x0, 0x4, 0x1, 0x14, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x0, 0x8, 0x192}, 0x10}, 0x78) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x8001, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:36 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x6, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000000000000009) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') 22:13:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x81000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0), 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40046f41, &(0x7f0000000300)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:37 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) r5 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x401, 0x10000) r6 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x59}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1f}, @NL80211_ATTR_PMKID={0x14, 0x55, "f5a304830a7016f86a9757e8a47a0094"}, @NL80211_ATTR_PMKID={0x14, 0x55, "91df29dce09c13d3388587d9262cfdfb"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040110}, 0x24000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000009e000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000024001280110001fbf530bb6467655f7382617664ed0000000c00058005001c"], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x5, @ipv4={[], [], @private=0xa010101}, 0x100}}, 0x910, 0x80}, &(0x7f0000000400)=0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000009e000000000000", @ANYRES32=r10, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005001c"], 0x44}}, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}]}, 0x38}}, 0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000580)={r11, 0x1, 0xfff9, 0x6, 0x2, 0x7}, 0x14) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:13:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001100)={0x0, 0x0}) r7 = socket(0xa, 0x2, 0xff) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000003d40)={&(0x7f0000003c00), 0xc, &(0x7f0000003d00)={&(0x7f0000003c40)={0xb4, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = syz_open_procfs(r6, &(0x7f0000000040)='oom_score_adj\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000001180)={@none, 0xfbfb}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x7, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:37 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000001c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:37 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) socket$kcm(0xa, 0x2, 0x11) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000001) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010101}}}], 0x20}, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="623b64a47abe8037bf1fe2237a289ff449ae44e7529404c197199c7a05cb9cf538a4737acdaff3acbd22fe6d5250d202020a55896269168b19af6b737942603266cb4e0035610b4a0b397cf8", 0x4c}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(r5, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000001e40), 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback={0x8, 0x7ffff000}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x246c3}], 0x1}, 0x60) sendmsg(r1, &(0x7f00000003c0)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x2, 0x2, 0x0, {0xa, 0x4e21, 0x8, @remote, 0x7fff}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000b40)="102192f4309444f59b8969460105c57a33c0b332d90ea69f8f0ccc1e42128c9872454e4fff3a54fbf31d03a171d451d2879cbd4a2935e41c44f558d2d3bbcfa69ed8d8ace7e805d290cf3607903e71388a13f03570294041f5b916bd8eb0d5606bec48168a7ea923b19eb8b15311736a3218f774f7acba34091da2e66d46719db02ea9e9a291bc1bf11f5444571d7ce68dafff2e47415aed608abf9639f6b6522ac367f4490d1828c0ea5c90ace82ecb165c110bf7e53d685d6931dfdc5f24c0bfbe19762f60bef86559627233611beb681b49c7f1cad1000c4fb72a14e29e0ea5c4d7b6f73982cea25bb9cb492ad94c2f7ebabda2fe95765ae438e2021594a1f73c42d0feded47322d21a7bcf0abba441250c2f1539f8148e8bf8f9c7b4d8bc14f60e05cc1450c0be19f31290a2bfa1be940c77ae9a7b1a391d4410d9ca502d776ea0d2a69d209f14a1ab755e49374472d38fed42aa7455a3cf3a99b94d7670ecd7c0917cb13da4139f2ae4354c6d9724be767dd872e1ab4452b79cc558904a9d748c91d4c0b8f21298435d4d685eae7f6603b174674ccd1ee8ed6a164cb5974c78ee93d146c98e028955d53de16bf7fe558b0d2e1d2752c7460d3abfef935907a6bd3280c784564ac5306e73e2f0d3efd47a0e46f0f14d7f0c17fd20db6bd4c413155efd4fa9f78bd0354864f89b71caa3dce1b977a2ddd3125c0a3541f3869d726992d6308520cec5f72709afc6b1f9c3d0d89343c1f56b7acbb499003b9c56a7c871a809c4c37a57b016cca7cf039182479014d303596ac8c14282baf0c5e613a66dd2bfd14b8de9a7946e8ecf64dccfe37f84c9edeacb2088e4b3e5f6476605c7c081869f10de0c153b9e7ec8aa30a00a99a02251cdb1e0bd6cf7c1e4e0dc730e76b82c6ed5c948f32971172a18e75bbfb6c6b9dcfde76b6b17181d0efc875813ea9a7a3adc9c54ef7ea9888440ab3dae5ebd1188be481946e4851341d6e4466b168cd740d8f080f7614b335ac571ff1ab4df3bfc8d73edac9eb4e480a00298bd1da0030ce26dd3516e1b9cc1f984c4415ca0573c09814b666e3e1a4bc635329726efd2a063c82fa308f3630d0ae2ae7e61781399e38affa4d3862e708670133a0039523c264ecdecfe15b4eba4b7a06eb93c790ad1123181c5f86ab575c868393fc997a2a5b423930b6c5c072044a1d0496c68352c2fc6cba9a9022fc7a11f9fe15e583c10bde59b57ef6f89376d7235dcfa7a9b2e9bd706ddf0763bdda13fa5d6aef0e20fe6a4f24d0fb663a374e9eabc113346a7f30d58cdf3c245a286872d6554e658f09e92e1c960506281cf174556950fcfdeacd7eda8cc1ff871186cce2a0ffbb69b5e72fe7c30f3aa66955ac343896d83852aa81dbdb9dc7df739fe90ef75972d0f26b74bfa061293ff07054a3285ecd12acb5a3d67bbd1340e72725813a369e63e93d620a450aa12491cc13fc643162468a9d56962f886bd14b19fe0fe28fc69e4a9ba6d17b577025f5aea2181f02ba0bb3365cb0dd98189b0b7ccfe6c08e57095a1487ae5be94dc8018a54af2b76c7475b8112ec84c60e2a493ae34a679f18803f127eed55970b4298a71f833251f4da78a889a34582a0cdfde35e3dde6bf3d16854ceed285bf7acc60e9cfbaaab1494dd7a8e67408ff7c4ab61a57bd7ce27ed4919aa2c75bc32622716a07b12e42d12410277794ae5697c88696d7c7dd341faeeac1128c2794ca291122066e4c60c8677c1bdff53d15d387d9a3d07c6ff7424ccd1ed28ed4e4f46452f9b557a85294147a91ce6418150f1a581bf0e4acc0c96d7ebad9e6f03f11e04b20d015252b282e58dabba6b79281f68f87d7cc9d83ef15e8a137b596524c2f14cb54c039258addd1555922fc361805f81808c284fc0e0d8e84d4e6aa9a7b0d75f9299ec345eff1e108b6b900095b11b2b0cb39c458cf3da45c19212c5a6ac553110fadba12d5120295fa7504c9f6243cc471328562469c757686b0e944cfc47f4def1f56f09050470612e63d3a344335992899514c57fd706ab353d11020c1eb8663c326b10fae9a5c444cca8a8ac742114c650a6b528e0aac7e6703378e053abc73d1417863bb86f09f030363716b69b7f8b45e2f6faf0c6e69eeaca1b94770c460e1afb69f365a26ebc6501a877bec7f5f0a3d014232a75c5a2fb47a96de319d7185f47c9e75446c63a506e9b12a4c1a4adf10dbc686a15656ec9961f8165053cb6039210819be065ef1911349852da4bbc9576634b0941c505f358f36200a424b8dae5526d968ccec8fb8dea9ed7fcd0ccc07aa8483c801ac0763125277d2f2760f50e9c079130ebe11a8ea6f1b64340f37a923f67ecd70adb0ec0628510e5d46625d261d79024084603172f587917db9f805c7863198c2ecd07b1abb4ce87f8be005c6c1100f9e3300b4b4b5b36f202ddcb5aeb400d588329dbc7eb315393a4472855813dc16a4e1d79210176c3b1e9959907f8ee80874c324c27d2fd1543971a366a87c4757f2e372ee28eb6f62c881dcc42e8b30d0fced468a773cf9e5f3318e4c0e2553591ff009864b421d7509654eba132a883757f98b3ad113c24c5389973fd94343a2804b94026ce9d2ba21cf3b587c6ed638919533d686789b7fe3fb631beb7bae416280687544aa8e3bfb27f74d78c3a59442b3dccfc9bff50d4fe332f730d8dc5e83a7639ae408e2feaabe13923fffa91b4ac35563f41983e7b9f4495c3300c7d42693a9e6050b206a171fca5f6b33acfed6262efbac806a80ba1c7d3df5b8673a4f7becdad62c6dfcb4b94f38d503666c28c0605a1f7908c47ecde7ef8ac1b796cffd3666b3a2efdaab6ccad4ccf488539d54ca1b61d496ba2a3ef04a21cfd6ef1a5b015ff7c1656b7dd2c2efbea6ecb20a46b4830eead6f5c58ba78ed4dd258d1549b7d0143f7e0a32593bf99e9d2f00d886f44114517dd9e9dba6c71dcfb079d75afceeab3c7c7a4508e8c6af884fb10c6ff835bbb45a961b037ff1f8b2c8fc2357e64d5e02651bdeed39655e1e230a9c9234e20c23dc2cac801b73ebee0812f7e7bac581f40c0f582ff30ebeb67932b47041c593fb5935ca0af8359b59bdaf793c5469ad7a4728a3834bb091e394e42586c8391c251663b5a4ce2086449c78ea66de0da499ff388d862427c1798169e756dffe2c4eff6072c30939f84f16742b3a694ac93ade3dd4b6760ae5098f284480ea3d8f05b14d200dcaf0f145f6c8d7fd863d11e86514732243b7d1526799dcebd61b1a43a9e4f65dd889b1ceb58be50afa6838c259f723a2405643d4b2aec0b20535832a78b94fa4de930c7ab3d4e1b0190458818c9b73436c255605d7253cfb1d7a1e7d91b5ebe86e9042f6df42947e5d21202a162218f8c7ae7c2983c5ea69e25e8a57e7594c6c3a488ab27843fba61880252999e591fb3a2e9e7426600b82218bd843405f99ef6fcc510158fa7e4972adaf65b57a05056274a371914f45ac12dae148fa2a23079e372c3f25f7648dfb0de4aa61128aadf247e42bd8de2cc636a8cc99a74f1bbf7e54009dd705114bf0c4070e4ca91e86564938a16a6138809d5e634c2297311e13aa0badddb5bcee66ef49b06fc86cea6d35249d44cdef05f832bd7b691f30f0603970388db715c8c5ad4788405e9d4695ae8c173bdd4c466519e24187d8c40a92cb18fb6b82acf719b9d8730423261978aa8895ce5128accc7ad8ef3bb7da638d8df52df5f2803e5b143b83e80e87aed82c362fa9ea8949016c0bf720dcaec0869c8ba2b6980ea13af69d096219b28866d8e5bab251caefe72dd1a30382c137c257fe4fedfdba0771cdc855be866781b51e55a1b26569767e2d6109fcd17d85f75a276c6eb4a72bfa70dc4764d8185c6cfd554f4ac28999700730c0d70d92a521de36ec3ed0c6e68cb79cd8a9ff7e0ecd3c0b79cf8b75521084bf604417b316bbf1a2f651e49d8ce94bd9aa74c61a7dcfa48ea091023c842782156013256d3b0bf379c1162e33ce139cccbdb3f6a6551821b2f2a2740df4c7f2fb46e8b322a77f8efda38c6617b6912e54c07e5c8f3b1577d4a723b0029634a8be8ac02431f00a69f07e5da54eaeeadd633e03aed91e1b5ee05dc6d1de57597658e567df6b603789fbebbb8ff583b13a2e65ee437eee17c9713e51774b14d7be2115c2b2be911b7353998e9401e3f440ae5e3f76c52d5d185dd5742af9d8818f4b590aa96fd612f81535e447e3c6979f57782c14c945337383aa32581e898a84c8c4a0b04552a4f6b0ce934668a21a9631caa66808ccd4bf525c4c4953e77265fbdd3842eeeedb1f3e64734dd4e800c0e975db4a1c168b5f6333459790af67cb93d3d598cdb9b5fbe4b497f69038920c2d76729dd26083ef1f529f43f56a77df36730dceb524a918bf89f7b3c0feb8ce0148f0073978f0b7306804c4e7b514f47b7757b07aa2e62125b15de09e69867e592e522d0f9e262e07344b4dab47e1a859cc5d339f3a578c976d14db99a304a1fe98430525010ec4a136c907d55a9d937bb63db34e10b92fc5dcc0fd6e64ceb0312539e9cc363ba30821eab640cd5ecd2fea1519da53ba534652c8f46855ecbd123367925847034828bf1f6d90e533a3967854dad450e1be163a4340fa5980278e2bde5338ab2b8ab0631f5d364fd0eb39354c68a0cb24d20f405a0751c4b53abab963a0c4a40d31c1f1c9ddc4531562c9e54659cf1371b2cbd2e8ecc38b204412f8acedf539b60b4b2f7621900140c2cc04840443f43eb9db5d23662a822114b8e0738cdd8361b5928e156d06d082782f455fa31ef56a92ad824ca251d000ed9ff03d712e4a4774c1b7b49a64c5ec9cde6c53c0681a92a0ef1e637f1bbee4ae660cc30488b85b0a7e3ae222d0619500e8e74b65aca48f0b672e9ce1be6689f254fa12ccee63888ed7e98cc393a20d8d3af2496adad6a02c2266c738652baac10b3299ef37f6b29bb00c23a64bc2cb45a27a12d3f290d1fe34e34e15f1421f620885bbd3c8eb1a52fc67b28e55d218a13d50dd9ce4541f7f233ef721402a907f4a78ab1295fee381a8836a54dfd3530093c563d277d69c2366a538ada35cf26ddaf5fa109f0287f55dfd2b07754d10e909b3a9f1409a2f66d9de75dec4aa97718d736d8dd117b4911628a7764e9ce71df1f123617ab9a3a01906dcea5507916ced0a907cbaa954cec6f319dd52b99c94c175890b2ae3452c2959ae45d2f7d21913510a2621eb0ab1f28f6158e9929e1a2273db792932d11a9376eda22188309648d8ef85de9c5bbf746cf28396d25b046aabab8d6fd584ad4035c92b2d1a21", 0xebc}, {&(0x7f0000000340)="11f3c8bc81f8c300b1bc3c10e11480734d1a8e68465b63996003f2024ec87d18ec0236f716c395741132e147ce4a4cec7853a8309b040ab239070fa00199ba7ad3bd05e22f94f77897b2eff285ea36bcea481fc11a7cd6be13e04953ec710c3c7692463cc40fcb8e046a68", 0x6b}, {&(0x7f0000000440)="a2aa510ac98f87fd30d843504c4403621720b91ecbb6552a785c0761365ea3197448c86fd07d3fe8dd8447128b252765cff1bb0eb68b4428c22898481ef67a73a02b016a869239fb0410ee6a6c2436b6cf16f5fc5b9d61fdf02c82707eb247bd1ce373a01339a225c232ca51de366f747e4d9384281dd762d07f17acecca9722c39f2c77718e08424f769824a1ae2ac8382380299454757ce6feebd542b782fcf21a512891e7ae13e4676d495c69eb15851bae8842dbc6a2369def6d583c", 0xbe}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f0000000500)="26a0ad59667f6112c17c803bb49ebae19d98c360a3281397a4ae2db750922e68a374b891773472ec77e671c04992278467568f498b0bbf2ac8a688dc397445ca8727c9dbc5ccb490c089437a0fb9221f230e851e4c42bc74849aef3f6d2fc8e4c8f4edaf5588b084d61f1ad274590953f44fe780a93c02857e6f7aec2aa4374e09d5d370c9dc534663bdab6989c705d6d3ce66b11b575edac268fbe1db6720a863ddd390a082ac21ca67d0e4f7b78056df1d4f699a34adfb4716561f1f77f49923eedfec4a6035605596", 0xca}, {&(0x7f0000000600)="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", 0xfc}], 0x6, &(0x7f00000033c0)=[{0x50, 0x104, 0x9, "703cda5bba4aac7ae0ad6939ba825a25430c754ff122fc33a0e1cfb23d7947e29dade8d688962badc50d8fe9848bb8d9b1735edc22eb238f058df8"}, {0x98, 0x84, 0x7, "eb32e64e11862e3cf9a86c81db192b44f646db2f0afa8844027022ea8e2b4693f3530395062dee7f754e0da6ae2bb1f7b813177ee68f6802d0a21c84aa1d8819e9b1c76f05fd810d44a2ca5a81ede7411c9402d8d6f27db2560fd949cbeb08876dd7874e15df2f8a1cc64a995584a20e7b1f5fce61f7f848acd9a8c2c199c6c211a48f1028703d"}, {0x70, 0x10a, 0x1000, "c02dda6a8186d2b71808dd82d3f986c54412b150b37cd0ebd5dab8ff05757130cd8a1ddb03bfa342defcf4036715b9bb7f4dab04a52bde531fc066d5f989b4fc42621729287cd77106cb264f322c7298b1b0b028aa8aab68a3"}, {0xd8, 0x11, 0x7, "1bbabf1583677e70352b2974c35d02a7411cab3fadcef27193f6fae949092af3310ad90c07a3711bf55a0e981b256fafc6567f0ee7434c73da03fe72a7968107557f922beaadaba2a2c5a7619567187cd525b4fdedc9d4bb047ee9ac81e4c5ae918f6de1ca3002e6d12c15a565b684ebe5dc4e60706642dd13596580dd31cb11314fb0c841458dd0870707623d69b78700ff9a02863afc8c005e8885bfab7e12ff48e3c75ab5f617f6d5c286a407cf24deadde876e349a51c9ef235e5a9ceb9fad"}, {0xa0, 0x6, 0x6, "878572c81d5e02f6398128352ce11c02e423c2a21d1696a09f745331e0b1681f3ea05edac82870cb03fb423b622a8de7bd442b905e92e3442ec2c8a83baa8c03fcda44bbe791cef8395d65042c590cb3bfa0702310362ba137f8878066cf7019e60cd80eb8ecb6c744fdf6800762f00ffacb01748136f59279b654c5278c0547f5b982c58b02dec4949b0c"}, {0x30, 0x118, 0x8, "a9c4a42a4bfa7083e6b576a2bf9962ac3efa913d83e6b5ad035a45ff572c26"}, {0x1000, 0x6, 0x5, "fb9b8114e009a104ae0207d71a8f58bb908e7439c5b7cc672f8ab7c8d0d35110a26d03a41e7adf0af7908fa10378b7b1bc98d42a3318f8951cb4fc09dae0ee4f54855cf01213e99c8f8b555d55b9c4f3498e0ecda3fbce13ceb0825870f64583d9a464689558ecde1008be9c980b20cb07c2e06b7ac95c4efa27e30cd8c50f5bb0522ccff67c43da62cf1a087bc8aeb11bbdd086f720bfa63411d63551686c4113c7330c4b75c93b157fc1f85f5d79f0846d5b4923023734c328cd0f2346b234d588c0aa7c291e0ce15d36dde588023966e25810c044e145c2f347fb1a7ccd65f75e1cf8b73f3e3b550451f83e6c0379e19fbface98c93b6180799e0f501ab0712f36124c7dcecdf6874d1d74fae9ac7c96e421895e75f2196d9ecb483bc321e62f123dc52428cf11b2d77819d8cd7cffa4eeee76acc0c6f77d95bc0a3e949e4c662fd8baf1efdd4e37d24624bb7f447b4d5638dbb2444384c58cd9beb2541cbfaabcb77842afcceadd037bc54fcf7a40c5e6310e6a85734c1d7627492af01f68d8d67e83b9fa8092c819617a72a8fff7e0fadc8bb9529549d5891279583f5583ca243424e157ec19c6d92fe6b7d498944f7ebf6ae698b60dcb5f41429400fe210c30dba24ec2aa7ffc723104b8570401b92cdec3adabb02501020fe8620328e3c63bd9ccba7d5af3efb51ac0046d6d919b6fe8d1cc7756add8cfcd979a53c7493c8ab98baa1794a7e5d049060fc649c160cbe62984913e172e12b259c773aa00ebf27c4dd21ea3de52a74f84cbd8b1b78fda7bbd971eb5195457972f120738d469c0e874a160b0601b45d427650eda42ac6ba2ab1380764bd77815f230f82efe236e943975d28f23a5330e72a44e1d1596ee5912e50922c5865990790a50c9a111003818ac6b24fc5517866ec4a60be8e62b89a013334c5bd298b70f89579e385db00bfdca431b9e0f2b6e7e159763fe64a6fe63e1d284d721fc602f5b101232da960814e9b489b689a528c1f4a0b16a4f12e8884803a24cfe2d4fcd55be120924761c3687eb51ed16b189bc734d14d4c0ceab4bd8a4e09c11430a3156d88e9a14cc34a02e6038bea9e845c36f395c1e1ee11cf9af2d63c734c6d27d613303a25d7b63a8cb755f53fa8bf10ae9eb0a18266cfe809bf67ac312c268f751a22837a94f65efa17ac4155e73eb7dff59a542c0648f814ddcd230e9a9552442257ff978beb81079d1770d98e4fd10dbdd64c5d254e7f2bf67ebecc2708b3a45c6343c37d4b37d3bb41ad59d0e63693687507e9fff86d4e9635292921121c4f362f27208ced67b9ff071842e28cd728ecdd2eb9e869bce420dc7e12ad8ea10d222471ebb2c1f3113bebd61da9dc1afeec550d8190b94729a6d00973ca0fe53c214198a40cda6a272c8967a665fa7b26645a5f303f101d5992d252776392ae1ebd8c0df08f4f38c93c4ceb7753139c205ff6cde18d4272b48e46df40deb2ae9c45d5a684efa936bbc59ad504975cb8ad46534cccf2c3f11548baa6055fa74531e02dec0440039b90de6fa5a782d926d54bf33b397922132670828acd52c0b85c1c692d1dd89e039a8d284b80122af54fa8be6e0b56ee83ca1a7f8a5104b4eb48485de50b85ea2ca1153364e9411f54702f77db416a3824a8bf0cd7f3d243d85707f6bca3f7864284599d36de8663896c3cda5aeddab69ea0c163c58fc342afe6aadbc064a22b001a0d1317d24294b8e5eef47ee0d043f044a367443bb6b16dc00b87661d8512430ddbf5965bec31fb309ddfcffb5ca6db9d5bf1479031d6f2119f48df3a31ffecc18a4bb3452e4a730895fc725860758d56f189bf0b3d55094d22822476420e910dfc29ae7a926bd2f9a75b7a97b3772db6f6e969b8d99331138e67e5942eb62b70ca668c111efa6f79032e79f9eef4c025dee830bad825ef935d359588fdc324f92afc6c2852aef6abf2dd4b1c2fa839f670ca9b97ed3a000880e2e445c2917b3b2010be321115628af9e9e04bda6df3eb08c264910fd0956f93b2f26f38c9333c550062be328a23cdf25b23c2ecf09a20517dabd173d9a7abc43c72e6d85cbd3cb7313d54df944f6cbdf638e5b32257f799cce03edbf639144832b7fb2b0816ab8651c01422ed45d53612706516f360da43051eb76e0880325fc4ff5be8c45fdba57334291d08fedfeecd01c7a4ede40d9d095d60d3cf57962d07e725195487c841c7a769e85854f6a22f04b430893737dd069d798a78a7f33a400086711d9f5a3f5d90cfb254b9966dee9825a44b0fbd431ddeefa3cc192c06111f094827befd72ca6083cd74464e8a2b1723cb6f77b240093d4bdb014a3c8198613ac56564ff9045cf33f3a6e8475cccafd609b3a6c3f6c6161dda574643b7e6ed204f75fdd15bae6ae76a36a6e162cfec6b924cefa4bedfceb47eebe73f371f78fb61f08a28499cfebefc692950693347c9d45c27d8bb42824208cadd98caa202becfdfc36d2afdb5215e2f67698c247322344fb0d5b85d459358fa454cccf2b667ec5877b9777ae3a51af774bd0db9b2da128664203e6a03f86cccefa9baae32a4f3a407f120b5dca0f58bb5458aabe7b8680a982a3085035e1a5518607d084d8ac67397132d736189aa86a844d20a3b5c2c4dbafa4c87eec2a5a56559de4d28c925900d9a09f6620c3917d5af2979697f7ed67daf8631d69dd9d7c168d1aea159315c7d74dcee84d0b7adfaf298fb3014b2f31b5ae8fafea8c625b976ae4160de8d3424712a82d7341849d0497231dfdc15109bdcba8b68420c59ca0417f857ea2fb6461aa02b0821627596d91c823ca7a39be6fbf2e533ebf9fd72a9334d780a5a509847e9797494576b55d681aaeedc2bc2cbcc2f8f8ec5f1f39efb1c7e93aceb688b06d51a1c781d7bc837a8efb5a3588778c837224c577fc2a239f97f9f8a37d0c21c517cbfe38dbb39ad9ff394e5c74a9ba0bd01f4b7972ea0fe7742a712c07eb61f7bf09a254b602b4f73ed6e637d274dda184c2bd0912bb80709d26523218c285f6e80b10ccaa4845327e015cdb6099eaba4675736dc90ad02b6119e83d3059fbe772d9bbef52ecd6497d563d1e369945b7a7a670f485fa135329882a132514d5bb879c9b1fc80bc27644667052a9df2678e08727b013175d75b913a2803d30d0ea61a0f36b752a8542f2e1b2259a7698623de77e322adb118727ebd020d079a7740c1182791e144ce75e22481be00138e0dff974feb9eae0cbc6fcb3e522894267a9976f9fb98d501ca09ea26f8db0d4ae5a3ce9a6304baff5721ea1694e2afc16535e148c1a8120c6c414874e75ea97e5ed4bec8ad6a54034fa2b163c58ab8c69d732252e7ff982c22eb64dc6271546e7dc084f22091acf7412a555abcf5e1c555fcf145c706e8c5c1bbad78aa85ad67ca72791dd8ba4d3f025a840871befbbf6080084cc292d638ae9dc9068d6c30cf447b8bb5140e8e4b6ce55f2a457a7dc1cfdb031295f0a4743f6df5aeefec4c99e2a73b6f5661d99a758d0f8c963737fc5df115ab93d6e19e50c411b9fe8182943f7db8e90d79ba7903d0884d7fd71b4674a8ae2e911da04913a29370f5286283713f69de4d4b57f310d6c1b2b6e2723d11e534af98bce8203e9c4be04eee044fb2e2dc8253c59cecfa22f319dc3ef5ae75edc4310ffaded78293c98eb27adea2a69920da453452465ae54ba3c47fa692f8d36916330341d5ae3e7edc269057e7562c38144686fab4abb6985044ed7829899939a26ee8c854e6f7ceade134bd18e8a15471086a3fe1456146e4486ca2ffe38a5506d91267ed33963f4c530d5eb8c05437a07b62904d7a55b08a85438cacc0dea0d716405d0238da48dd519355960dfaac953d4df8ad46a591163b174cbb1993b30613dbb5017b8a5ac69634e2db63b427f23c40d997b0ee47e5bf9e40fac1da3cae18dbdd524f66a26bb7143295c0dcb7f68d3252d2e19544c5c242831afc3af0665f0973bc3a78dceb4fa9490046836136e10e9343b278c44fb35cfcab69c11994d5fb1acb1b16454dc146c5198cecd1e7dfc11250564095d6964cf11e63bfc0b2bb8a03c8287f6709a3d80eb4918f2254b5e210fe45797cd105bbb7d181cc2534ac1b88c5bd95dc912c52375dcd58339ca729e72076d10d629091f6234dc9ea161a1a76ac228ed62d43f1eb01d4a25203712d16b78fe4f905d60cd4fc2be2a71e9f138fb339df3212fcd9b2096d45d1c068c2389f2c8e3504d23258aa93ff3f739b2513b969f41d3b9ce87f172e92b18cc0611bb85bff93cc8491f3435c6c00ea841278873579f4d551ef6d84754d9050bca7264a37af90e7e634d60171c3ee4ce631a69240d74433b20edb66c137aa46c838a4e8494a05732387a5a6f25c2ef40dc2ade307c331c3d036f03b2821ab260e90751d9ca364c424dc8c39c23a1a62057f0a26f2e9b08afef8d0635dcd9d0efe137d139fea311deb16151f99c63fbb119d034e9b905acbbf0a0a69b45e4f78fa480782e7b0afb9cf2200ad4b928a4396860069b33f5fc0dc6e339dbc6ea42f4a6c61d0916e319bade983e3d43db98606b303c4f50ec120952ef32a2964f7eea59ac73b6ad12f770074033ba2a6e73fa831171f96fa3c1739904a414ce77047dddb07591aafd866a83fe863a183998a9e284e4e4e9b4ce7d9e34ab498940c7c4c1460f3dde5047a19de9b2e621625a6911aa95f25808de17b3bcae3fb1d582b9adedeed37d1ed804bfecaf5fa753dbe227d3a1f73a4109ba80663095b1a4e6b35e65a5dd14fa8f0611030b21665cfc302ebe2c5843e0f1bd957724c157930a8955852ecbb37ae73cc8212cc9e4e33fc1772cfb78b7bd580c734175ca2fbfc21caa4e1b5c65fe00d27bbb6732bcdf22574141322992cfd70ff943b8c9a1d7a6904a8d656aa4915f50cce8d975c7c215fb94d348a4ff977d573bb9d1573f7926e6817b1483e71dfc7db4dff75f74e98a3092d6084d046625bc938d2d094d6428f6890518df0a45ccda830b3980b36fe8a6254882ae7f1dc1c579340bc06f3870ab7b4dfde3348a023f3aedf769640b3ac8fdcc89ad20ff80153cbe7087334d78d69c9bad6ed5a855f14d4e65ee33b91f451ae9847e1550d8a69ca15f888ab01fe1f3d36951f0670942c9b49bf755c04d27dae6d8fd7c625fadfcf94a600a7b58c6a28361a741426f550af58e31004c617d93cea92c4006a6181a8e8d4044894fb35bb5b190190eff8086cdb09b8d1f009e47788e978f723b04318f7df95d7f401b5e932afc6fdf1224d8ccefec6b57f7fe90fcec9405ad413eedc31eb64fa8b20733761d374811763eb89db37dcb2b3a30c6b654cd8993c9ed2e5b6b4d347c792ec11af47358000327dc9e51e631e19d81569fa05cd5064393bdcce6f06af6649f6c4241a98198c8a05db7615f9bf798ebdba79d4ecf5683651e7d908da8d2e58475717326b0186f87656078aae5a7380bf81e850d12972bef05e15324654836ed05807b3f6babbb5c9512db77c21359f266e8c84306bee4a77774fe25382d851e7dea14a75dc403ed87bfdf7bc254e47a714875b9a02f6a1301b935401692f61f6b82a2264b181b65f4c9de34a4106b7796fdbcebd122c97fe6b763623063c25ef3ed55a3821e884c174ca0e44659af6ec97afb6eed618cb79bfd8e478f75d15d73bfc8a00efcda19601a9cf3997f7a29242efed4f4902de9702e57e33d8d47d48ed212bacb8a6645a8859e281c66c3ba70034497432f1"}, {0x60, 0x10d, 0x83, "741310ee0046a3f1e90d8c2ee2a56f02b846cbbc4483505cd05773313785a7dbe878ce5d4f3048279b60f1e9dc10110fd8f52df61aefa3f6206944dee6c25882efa4d3d71349090e34aa042bed54"}, {0x38, 0x3a, 0x1000, "072f682daf78735a6edd940ac083702b94b2b81061ea75b61f610a751679768f925e"}, {0xa0, 0x113, 0xedc, "4b3f26f4af05fad52da75933482bec9227d8bad45dceac205d1bc853561acab5faf1051f23b223ca14cb687ad2a3e9e83e0e3752c1cdc08b6b504f497fd6ad18ce932d5eed5bf17e3e420a4b730b9e4f23e2b8f5d0d69a23cf69ea7c5167efb976c72125d9b0fa4665553e8b96b71c36bb5d702e50b500ff23f6344e39b5d72577478257f8fec2f52a73da8a21da"}], 0x1438}, 0x8840) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0xfffffffc, 0x7f, 0x2, 0x20, 0xffffffffffffffff, 0x4, [], r3, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x40) 22:13:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:37 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:37 executing program 0: sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000100", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf25010000008800040005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x20000009, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x240d0) r8 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000280)={{r8}, "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"}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6000000) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 22:13:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x9, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 22:13:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:13:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x10, 0xa1a) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000001100)={0x0, 0x5, 0xf447, &(0x7f0000000040)=0x6ed7af10}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 480.670626][T18785] ------------[ cut here ]------------ [ 480.746097][T18785] WARNING: CPU: 1 PID: 18785 at drivers/gpu/drm/vkms/vkms_gem.c:37 vkms_gem_free_object+0x85/0xa0 [ 480.836643][T18785] Kernel panic - not syncing: panic_on_warn set ... [ 480.843275][T18785] CPU: 1 PID: 18785 Comm: syz-executor.0 Not tainted 5.9.0-rc7-syzkaller #0 [ 480.851945][T18785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.862032][T18785] Call Trace: [ 480.865334][T18785] dump_stack+0x198/0x1fd [ 480.869750][T18785] panic+0x382/0x7fb [ 480.873660][T18785] ? __warn_printk+0xf3/0xf3 [ 480.878259][T18785] ? vkms_gem_free_object+0x85/0xa0 [ 480.883468][T18785] ? __warn.cold+0x5/0x4b [ 480.896316][T18785] ? __warn+0xd6/0x1f2 [ 480.900412][T18785] ? vkms_gem_free_object+0x85/0xa0 [ 480.905650][T18785] __warn.cold+0x20/0x4b [ 480.909905][T18785] ? vkms_gem_free_object+0x85/0xa0 [ 480.915119][T18785] report_bug+0x1bd/0x210 [ 480.919466][T18785] handle_bug+0x38/0x90 [ 480.923635][T18785] exc_invalid_op+0x14/0x40 [ 480.928145][T18785] asm_exc_invalid_op+0x12/0x20 [ 480.933005][T18785] RIP: 0010:vkms_gem_free_object+0x85/0xa0 [ 480.938818][T18785] Code: 00 75 2b e8 ad 73 e7 fc 48 8d bd 30 02 00 00 e8 01 08 cc fc 48 89 ef e8 f9 13 a4 ff 48 89 ef 5d e9 80 d2 27 fd e8 8b 73 e7 fc <0f> 0b eb a8 e8 82 73 e7 fc 0f 0b eb cc e8 09 4b 28 fd eb bb e8 02 [ 480.958428][T18785] RSP: 0018:ffffc9000657fc08 EFLAGS: 00010293 [ 480.964502][T18785] RAX: 0000000000000000 RBX: ffffffff848eca80 RCX: ffffffff84330268 [ 480.972482][T18785] RDX: ffff8880959d4080 RSI: ffffffff848ecb05 RDI: ffff88809e00b2c0 [ 480.980465][T18785] RBP: ffff88809e00b000 R08: 0000000000000001 R09: ffff88809e00b003 [ 480.988448][T18785] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880a1110c28 [ 480.996519][T18785] R13: ffff88809e00b008 R14: ffff88809e00b128 R15: ffff88809751f800 [ 481.004519][T18785] ? __vkms_gem_create+0xf0/0xf0 [ 481.009625][T18785] ? drm_gem_object_handle_put_unlocked+0x1d8/0x420 [ 481.016268][T18785] ? vkms_gem_free_object+0x85/0xa0 [ 481.022262][T18785] ? vkms_gem_free_object+0x85/0xa0 [ 481.027472][T18785] drm_gem_object_handle_put_unlocked+0x3ac/0x420 [ 481.033903][T18785] drm_gem_object_release_handle+0xf9/0x1b0 [ 481.039813][T18785] ? drm_gem_object_handle_put_unlocked+0x420/0x420 [ 481.046416][T18785] idr_for_each+0x113/0x220 [ 481.050927][T18785] ? idr_find+0x50/0x50 [ 481.055091][T18785] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 481.060909][T18785] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 481.066908][T18785] drm_gem_release+0x22/0x30 [ 481.071507][T18785] drm_file_free.part.0+0x866/0xcb0 [ 481.076806][T18785] ? fsnotify+0x1040/0x1040 [ 481.081356][T18785] drm_close_helper.isra.0+0x17d/0x1f0 [ 481.086827][T18785] drm_release+0x1e6/0x530 [ 481.091247][T18785] __fput+0x285/0x920 [ 481.095325][T18785] ? drm_release_noglobal+0x180/0x180 [ 481.100713][T18785] task_work_run+0xdd/0x190 [ 481.105297][T18785] exit_to_user_mode_prepare+0x1e1/0x200 [ 481.110953][T18785] syscall_exit_to_user_mode+0x7e/0x2e0 [ 481.116517][T18785] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 481.122442][T18785] RIP: 0033:0x4177e1 [ 481.126384][T18785] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 481.146880][T18785] RSP: 002b:000000000169fbe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 481.155299][T18785] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004177e1 [ 481.163279][T18785] RDX: 0000000000000000 RSI: 0000000000000657 RDI: 0000000000000003 [ 481.171264][T18785] RBP: 0000000000000001 R08: 00000000e417e657 R09: 00000000e417e65b [ 481.179327][T18785] R10: 000000000169fcd0 R11: 0000000000000293 R12: 0000000001192558 [ 481.187311][T18785] R13: 00000000000755cb R14: ffffffffffffffff R15: 000000000118bf2c [ 481.196700][T18785] Kernel Offset: disabled [ 481.201062][T18785] Rebooting in 86400 seconds..